Wove · OAuth Scopes

Wove OAuth Scopes

OAuth 2.0 derived

Wove publishes 9 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Wove API on a user’s behalf.

Tokens are issued from https://api.wove.com/api/v1/external/auth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Company

Scopes: 9 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
https://api.wove.com/api/v1/external/auth/token

Flows
clientCredentials

Scopes (9)

Scope	Description	Flows
shipments:read	Read access to shipments (named in TokenRequest/TokenResponse scope examples).
documents:read	Read access to documents (named in TokenRequest/TokenResponse scope examples).
validation:create	Create document validation jobs (named in TokenRequest/TokenResponse scope examples).
tariffs:read	Required for tariff lookup/search/batch-lookup operations (per-operation 403 responses).
rates:read	Required for querying rates from query-bank sources (per-operation 403 response).
sources:write	Required for uploading and processing rate/document sources (per-operation 403 response).
tms-organizations:read	Read access to TMS organizations (per-operation 403 responses).
tms-organizations:write	Create/update/import TMS organizations (per-operation 403 responses).
tms-organizations:delete	Delete TMS organizations (per-operation 403 response).

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-21'
method: derived
source: openapi/wove-external-api-openapi-original.yml
description: >-
  OAuth 2.0 scopes for the Wove External API, derived from the published
  OpenAPI at api.wove.com/api/docs. The API uses the client_credentials grant
  (POST /api/v1/external/auth/token) with an optional space-separated scope
  parameter; the spec's securityScheme is declared as http bearer (JWT), with
  the scope model expressed through the TokenRequest/TokenResponse schemas and
  per-operation 403 "requires <scope> scope" responses. Scope names below are
  exactly those named in the spec; Wove publishes no standalone scopes
  reference page.
schemes:
  - name: bearerAuth
    type: http (bearer JWT) issued via OAuth 2.0 client_credentials
    source: openapi/wove-external-api-openapi-original.yml
    flows:
      - flow: clientCredentials
        tokenUrl: https://api.wove.com/api/v1/external/auth/token
        revocationUrl: https://api.wove.com/api/v1/external/auth/revoke
scopes:
  - scope: shipments:read
    description: Read access to shipments (named in TokenRequest/TokenResponse scope examples).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: documents:read
    description: Read access to documents (named in TokenRequest/TokenResponse scope examples).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: validation:create
    description: Create document validation jobs (named in TokenRequest/TokenResponse scope examples).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: tariffs:read
    description: Required for tariff lookup/search/batch-lookup operations (per-operation 403 responses).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: rates:read
    description: Required for querying rates from query-bank sources (per-operation 403 response).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: sources:write
    description: Required for uploading and processing rate/document sources (per-operation 403 response).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: tms-organizations:read
    description: Read access to TMS organizations (per-operation 403 responses).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: tms-organizations:write
    description: Create/update/import TMS organizations (per-operation 403 responses).
    sources: [openapi/wove-external-api-openapi-original.yml]
  - scope: tms-organizations:delete
    description: Delete TMS organizations (per-operation 403 response).
    sources: [openapi/wove-external-api-openapi-original.yml]