Scopes

Which scope each endpoint requires and what a scope allows a token to do.

How scopes work

A personal access token carries the scopes selected when it was created. An endpoint rejects a token that lacks the scope it requires. Grant an integration only the scopes it needs.

Scopes and endpoints

AuthenticationAuthenticationUse a user-scoped personal access token with the minimum required scopes.Your first requestYour first requestVerify the credential with a read-only request and inspect the response.Errors and conventionsErrors and conventionsShared behavior for authentication, writes, pagination, and failures.