Scopes

Scopes define the level of access your application is requesting. Users see the requested scopes on the consent screen before granting permission.

Available scopes

Default scope

If no scope parameter is provided in the authorization request, the default scope is openid.

Scope validation

Each registered OAuth client has a list of allowed scopes. If your authorization request includes a scope that is not in your client's allowed list, the request will be rejected with an invalid_scope error:

{
  "error": "invalid_scope",
  "error_description": "Scope 'zapier:webhooks' is not allowed for this client"
}

Requesting multiple scopes

Separate multiple scopes with a space in the scope parameter:

scope=openid email profile

When URL-encoding:

scope=openid%20email%20profile