Adobe Workfront · OAuth Scopes

Adobe Workfront OAuth Scopes

OAuth 2.0 probed

Adobe Workfront publishes 18 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Adobe Workfront API on a user’s behalf.

Tokens are issued from https://mcp.workfront.adobe.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyWork ManagementProject ManagementMarketing OperationsCreative OperationsCollaborationApprovalsResource ManagementWorkflow-AutomationEnterprise SoftwareAdobeMCP

Scopes: 18 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://mcp.workfront.adobe.com/oauth/authorize

Token URL
https://mcp.workfront.adobe.com/oauth/token

Flows
authorizationCode

Scopes (18)

Scope	Description	Flows
AdobeID	Core Adobe IMS identity scope.	authorizationCode
openid	OpenID Connect — issue an ID token.	authorizationCode
profile	Access to the signed-in user's Adobe profile.	authorizationCode
email	Access to the signed-in user's email address.	authorizationCode
additional_info.projectedProductContext	Adobe IMS product-context claim; resolves which Adobe products and organizations the user is entitled to, including the Workfront instance.	authorizationCode
read_pc.workfront	Read the user's Workfront product context — the Workfront-specific entitlement scope.	authorizationCode
read_organizations	Read the Adobe organizations (IMS orgs) the user belongs to.	authorizationCode
org.read	Read organization metadata.	authorizationCode
accounts.read	Read account information.	authorizationCode
session	Session management scope.	authorizationCode
read_pc	Read product context (generic).	authorizationCode
read_pc.acp	Read Adobe Cloud Platform product context.	authorizationCode
read_pc.dma_tartan	Read product context for the Adobe DMA (tartan) service group.	authorizationCode
aem.folders	Adobe Experience Manager folder access — used by the Workfront/AEM document tools.	authorizationCode
aem.assets.author	Adobe Experience Manager Assets authoring access.	authorizationCode
aem.assets.delivery	Adobe Experience Manager Assets delivery access.	authorizationCode
ab.manage	Adobe App Builder management scope.	authorizationCode
creative_cloud	Creative Cloud access.	authorizationCode

📄 Provider scope reference: https://experienceleague.adobe.com/en/docs/workfront/using/administration-and-setup/configure-integrations/create-oauth-application

Source

OAuth Scopes

generated: '2026-08-12'
method: probed
source: https://mcp.workfront.adobe.com/.well-known/oauth-authorization-server
docs: https://experienceleague.adobe.com/en/docs/workfront/using/administration-and-setup/configure-integrations/create-oauth-application
note: Neither published Workfront Planning OpenAPI declares an oauth2 securityScheme, so
  derive-oauth-scopes.py found nothing. The scope list below is read verbatim from the two live OAuth
  discovery documents the Workfront MCP host serves (RFC 8414 authorization-server metadata and RFC
  9728 protected-resource metadata), which advertise an identical scopes_supported array. These are
  Adobe IMS scopes, not Workfront-object scopes — Workfront itself does not publish a per-resource
  scope reference; object-level authorization is enforced by Workfront access levels and sharing
  (accessRules), not by OAuth scope.
schemes:
- name: Workfront MCP OAuth 2.1
  source: well-known/workfront-oauth-authorization-server.json
  issuer: https://mcp.workfront.adobe.com/mcp/v1
  flows:
  - flow: authorizationCode
    authorizationUrl: https://mcp.workfront.adobe.com/oauth/authorize
    tokenUrl: https://mcp.workfront.adobe.com/oauth/token
    pkce: [S256]
scopes:
- scope: AdobeID
  description: Core Adobe IMS identity scope.
  flows: [authorizationCode]
- scope: openid
  description: OpenID Connect — issue an ID token.
  flows: [authorizationCode]
- scope: profile
  description: Access to the signed-in user's Adobe profile.
  flows: [authorizationCode]
- scope: email
  description: Access to the signed-in user's email address.
  flows: [authorizationCode]
- scope: additional_info.projectedProductContext
  description: Adobe IMS product-context claim; resolves which Adobe products and organizations the
    user is entitled to, including the Workfront instance.
  flows: [authorizationCode]
- scope: read_pc.workfront
  description: Read the user's Workfront product context — the Workfront-specific entitlement scope.
  flows: [authorizationCode]
- scope: read_organizations
  description: Read the Adobe organizations (IMS orgs) the user belongs to.
  flows: [authorizationCode]
- scope: org.read
  description: Read organization metadata.
  flows: [authorizationCode]
- scope: accounts.read
  description: Read account information.
  flows: [authorizationCode]
- scope: session
  description: Session management scope.
  flows: [authorizationCode]
- scope: read_pc
  description: Read product context (generic).
  flows: [authorizationCode]
- scope: read_pc.acp
  description: Read Adobe Cloud Platform product context.
  flows: [authorizationCode]
- scope: read_pc.dma_tartan
  description: Read product context for the Adobe DMA (tartan) service group.
  flows: [authorizationCode]
- scope: aem.folders
  description: Adobe Experience Manager folder access — used by the Workfront/AEM document tools.
  flows: [authorizationCode]
- scope: aem.assets.author
  description: Adobe Experience Manager Assets authoring access.
  flows: [authorizationCode]
- scope: aem.assets.delivery
  description: Adobe Experience Manager Assets delivery access.
  flows: [authorizationCode]
- scope: ab.manage
  description: Adobe App Builder management scope.
  flows: [authorizationCode]
- scope: creative_cloud
  description: Creative Cloud access.
  flows: [authorizationCode]
x-evidence:
  fetched: '2026-08-12'
  urls:
  - url: https://mcp.workfront.adobe.com/.well-known/oauth-authorization-server
    http_status: 200
  - url: https://mcp.workfront.adobe.com/.well-known/oauth-protected-resource
    http_status: 200
  - url: https://mcp.workfront.adobe.com/mcp/v1/workfront/.well-known/oauth-protected-resource
    http_status: 200

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/workfront-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.