Inbox Zero Authentication

generated: '2026-11-10'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://docs.getinboxzero.com/essentials/api-keys.md
sources:
- https://docs.getinboxzero.com/essentials/api-keys.md
- https://docs.getinboxzero.com/hosting/google-oauth.md
- https://docs.getinboxzero.com/hosting/microsoft-oauth.md
- https://docs.getinboxzero.com/essentials/getting-started.md
description: Authentication methods for Inbox Zero API
schemes:
- type: oauth2
  name: Google OAuth
  evidence: Configure Google OAuth credentials, scopes, and required APIs
  flows:
  - authorization_code
  scopes:
  - https://www.googleapis.com/auth/userinfo.profile
  - https://www.googleapis.com/auth/userinfo.email
  - https://www.googleapis.com/auth/gmail.modify
  - https://www.googleapis.com/auth/gmail.settings.basic
  - https://www.googleapis.com/auth/contacts
  - https://www.googleapis.com/auth/calendar.readonly
  - https://www.googleapis.com/auth/calendar.events
  - https://www.googleapis.com/auth/calendar.freebusy
  - https://www.googleapis.com/auth/drive.file
  - https://www.googleapis.com/auth/drive
  how_to_obtain: Create OAuth credentials in Google Cloud Console, then copy the Client ID and secret into the .env file as GOOGLE_CLIENT_ID and
    GOOGLE_CLIENT_SECRET.
- type: oauth2
  name: Microsoft OAuth
  evidence: Configure Azure app registration and Microsoft Graph permissions
  flows:
  - authorization_code
  scopes:
  - openid
  - profile
  - email
  - User.Read
  - offline_access
  - Mail.ReadWrite
  - Mail.Send
  - MailboxSettings.ReadWrite
  - Calendars.Read
  - Calendars.ReadWrite
  - Files.ReadWrite
  - Contacts.Read
  - People.Read
  how_to_obtain: Register an app in Microsoft Azure Portal, then copy the Application (client) ID, Directory (tenant) ID (if single‑tenant), and
    client secret into the .env file as MICROSOFT_CLIENT_ID, MICROSOFT_TENANT_ID, and MICROSOFT_CLIENT_SECRET.
docs: https://docs.getinboxzero.com/essentials/api-keys.md