Scopes

141 scopes an access token can carry, each with the operations it unlocks. A bundle grants many at once: mcp_agent, mcp_agent_write, read_api, read_repository, write_api, write_repository.

141 scopes

access:administerLimit access, and stop a group or repository inheriting it5 operations
access:manageGive, change and revoke access to groups and repositorieswrite_api5 operations
access:readSee who has access to a group or repository, and whyread_apiwrite_api8 operations
ai_org:approvePublish an AI organization's revisions and resume what was paused5 operations
ai_org:manageConfigure and operate an AI organization: drafts, pausing, suspending, sessionswrite_api11 operations
ai_org:readRead an AI organization, its agents, sessions and usageread_apiwrite_api9 operations
approval_rule:manageDefine, change and delete approval rules, and set the approval policywrite_api6 operations
approval_rule:readSee the approval rules and policy of a group or repositoryread_apiwrite_api2 operations
- GET/groups/{group_id}/approval-policy
- GET/repositories/{repo_id}/approval-policy
attention:readRead your attention inbox and activity feedread_apiwrite_api3 operations
- GET/user/activity
- GET/user/attention
- GET/user/attention/count
attention:writeResolve, snooze, and bookmark attention itemswrite_api4 operations
audit:readRead the audit log (org owners / platform admins)read_apiwrite_api3 operations
audit:verifyVerify audit-log chain integritywrite_api2 operations
- GET/admin/audit-log/verify
- GET/groups/{group_id}/audit-log/verify
billing:adminReview limit-increase requests and set namespace overrideswrite_api5 operations
billing:manageStart a Checkout or Billing Portal sessionwrite_api2 operations
- POST/groups/{group_id}/billing/checkout-session
- POST/groups/{group_id}/billing/portal-session
billing:readView billing (limit-increase requests, subscription, invoices)read_apiwrite_api5 operations
billing:request_limit_increaseFile a limit-increase requestwrite_api1 operation
- POST/groups/{group_id}/limit-increase
branch_rule:manageManage branch ruleswrite_apiwrite_repository6 operations
branch_rule:readView branch rulesread_apiread_repositorywrite_apiwrite_repository4 operations
branch:createCreate branchesmcp_agent_writewrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/branches
branch:deleteDelete brancheswrite_apiwrite_repository1 operation
- DEL/repositories/{repo_id}/branches/{branch_name}
branch:readView branchesmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/repositories/{repo_id}/branches
- GET/repositories/{repo_id}/branches/{branch_name}
catalog:manageDeclare, edit and delete catalog serviceswrite_api13 operations
catalog:readRead the service catalog: services, their bindings, their owners and their overviewsread_apiwrite_api24 operations
commit_status:readView commit statusesmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository1 operation
- GET/repositories/{repo_id}/commits/{commit_ref}/statuses
commit_status:writeCreate commit statuseswrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/commits/{commit_ref}/statuses
commit:createWrite commits from file changes, and resolve merge-request conflictswrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/commits
- POST/repositories/{repo_id}/merge-requests/{mr_id}/conflicts/resolve
commit:readView commitsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/repositories/{repo_id}/commits
- GET/repositories/{repo_id}/commits/{commit_ref}
dashboard:readRead your dashboard summary counters and your own activity breakdownmcp_agentmcp_agent_writeread_apiwrite_api2 operations
- GET/user/dashboard/summary
- GET/user/top-repositories
diff:readView commit, merge-request, and branch-comparison diffsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository9 operations
feedback:createSend feedback about Gitmoap itselfmcp_agentmcp_agent_writewrite_api1 operation
- POST/feedback
feedback:readRead agents' feedback about Gitmoap (platform admins)read_apiwrite_api2 operations
- GET/admin/feedback
- GET/admin/feedback/{feedback_id}
git:readClone and fetch over gitread_apiwrite_api0 operations
No operation requires this scope on its own.
git:writePush over gitwrite_api0 operations
No operation requires this scope on its own.
group_member:addAdd group memberswrite_api1 operation
- POST/groups/{group_id}/members
group_member:readList group membersread_apiwrite_api3 operations
group_member:removeRemove group memberswrite_api1 operation
- DEL/groups/{group_id}/members/{user_id}
group_member:updateUpdate group member roleswrite_api1 operation
- PUT/groups/{group_id}/members/{user_id}
group:createCreate groupswrite_api1 operation
- POST/groups
group:deleteDelete groupswrite_api1 operation
- DEL/groups/{group_id}
group:readView groups and namespace usagemcp_agentmcp_agent_writeread_apiwrite_api7 operations
group:updateUpdate groups and group visibilitywrite_api3 operations
insights:readRead flow metrics and cycle times for repositories and namespacesmcp_agentmcp_agent_writeread_apiwrite_api3 operations
issue_blueprint:manageDefine and remove custom work-item types (blueprints)write_apiwrite_repository6 operations
issue_blueprint:readRead a scope's custom work-item types (blueprints)read_apiread_repositorywrite_apiwrite_repository4 operations
issue_comment:createComment on work itemsmcp_agent_writewrite_apiwrite_repository2 operations
- POST/groups/{group_id}/issues/{issue_id}/comments
- POST/repositories/{repo_id}/issues/{issue_id}/comments
issue_comment:deleteDelete work-item commentswrite_apiwrite_repository2 operations
- DEL/groups/{group_id}/issues/{issue_id}/comments/{comment_id}
- DEL/repositories/{repo_id}/issues/{issue_id}/comments/{comment_id}
issue_comment:readView work-item comments and timelinesmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository12 operations
issue_comment:updateEdit and resolve work-item comment threadsmcp_agent_writewrite_apiwrite_repository6 operations
issue_reaction:manageAdd and remove reactions on work-item commentsmcp_agent_writewrite_apiwrite_repository4 operations
issue_settings:manageManage issue settingswrite_apiwrite_repository4 operations
issue_settings:readRead effective issue settingsread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/groups/{group_id}/issue-settings
- GET/repositories/{repo_id}/issue-settings
issue:createFile work itemsmcp_agent_writewrite_apiwrite_repository3 operations
issue:deleteDelete work itemswrite_apiwrite_repository4 operations
issue:readRead work items and their settingsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository39 operations
issue:updateUpdate work items — status, fields, hierarchymcp_agent_writewrite_apiwrite_repository35 operations
label:manageDefine and remove issue labelswrite_apiwrite_repository6 operations
merge_request:createCreate merge requestsmcp_agent_writewrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/merge-requests
merge_request:deleteDelete merge requestswrite_apiwrite_repository1 operation
- DEL/repositories/{repo_id}/merge-requests/{mr_id}
merge_request:mergeMerge merge requestswrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/merge-requests/{mr_id}/merge
- POST/repositories/{repo_id}/merge-requests/{mr_id}/merge-stack
merge_request:readView merge requestsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository16 operations
merge_request:updateUpdate, close and reopen merge requestsmcp_agent_writewrite_apiwrite_repository3 operations
milestone:manageDefine and remove milestoneswrite_apiwrite_repository6 operations
mr_comment:createCreate merge-request commentsmcp_agent_writewrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/merge-requests/{mr_id}/comments
mr_comment:deleteDelete merge-request commentswrite_apiwrite_repository1 operation
- DEL/repositories/{repo_id}/merge-requests/{mr_id}/comments/{comment_id}
mr_comment:readView merge-request commentsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository5 operations
mr_comment:updateEdit and resolve merge-request comment threadsmcp_agent_writewrite_apiwrite_repository3 operations
mr_reaction:manageAdd and remove reactions on merge-request commentsmcp_agent_writewrite_api2 operations
- POST/repositories/{repo_id}/merge-requests/{mr_id}/comments/{comment_id}/reactions
- DEL/repositories/{repo_id}/merge-requests/{mr_id}/comments/{comment_id}/reactions/{reaction}
mr_settings:manageManage merge-request settingswrite_apiwrite_repository4 operations
mr_settings:readView merge-request settingsread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/groups/{group_id}/mr-settings
- GET/repositories/{repo_id}/mr-settings
namespace_admin:manageReclaim an organization's name and hold it for another (platform admins)write_api1 operation
- POST/admin/groups/{group_id}/reclaim-name
onboarding:manageUpdate onboarding intent and dismissalwrite_api1 operation
- PATCH/user/onboarding
onboarding:readRead onboarding stateread_apiwrite_api1 operation
- GET/user/onboarding
package:deleteDelete package versionswrite_api2 operations
- DEL/groups/{group_id}/packages/{format}/{package_name}
- DEL/groups/{group_id}/packages/{format}/{package_name}/versions/{version}
package:readDownload packages and read registry metadataread_apiwrite_api13 operations
package:writePublish packages and yank versionswrite_api5 operations
pipeline_variable:manageDeclare, replace and delete pipeline variableswrite_api4 operations
pipeline_variable:readView the pipeline variables a scope declares or inheritsread_apiwrite_api2 operations
- GET/groups/{group_id}/pipeline-variables
- GET/repositories/{repo_id}/pipeline-variables
pipeline:approveGrant or deny a pipeline node waiting at an approval gate2 operations
- POST/repositories/{repo_id}/pipeline-runs/{pipeline_run_id}/approvals/{node_id}
- POST/repositories/{repo_id}/pipeline-runs/{pipeline_run_id}/approve
pipeline:cancelCancel pipeline runswrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/pipeline-runs/{pipeline_run_id}/cancel
pipeline:manageCreate, update, and delete pipeline definitionswrite_apiwrite_repository20 operations
pipeline:readView pipeline runs and definitionsread_apiread_repositorywrite_apiwrite_repository31 operations
pipeline:retryRetry pipeline runswrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/pipeline-runs/{pipeline_run_id}/retry
pipeline:triggerTrigger and validate pipeline runswrite_apiwrite_repository5 operations
provider_admin:manageReview, feature and sunset provider submissionswrite_api6 operations
provider_admin:readView the provider review queueread_apiwrite_api1 operation
- GET/admin/provider-submissions
provider_catalog:readBrowse the provider catalog and marketplaceread_apiwrite_api8 operations
provider_connection:manageManage provider connection credentialswrite_api6 operations
provider_connection:readView provider connectionsread_apiwrite_api5 operations
provider_policy:manageManage provider tier policywrite_api2 operations
- PUT/groups/{group_id}/provider-policy
- DEL/groups/{group_id}/provider-policy
provider_policy:readView provider tier policyread_apiwrite_api2 operations
- GET/groups/{group_id}/provider-policy
- GET/repositories/{repo_id}/provider-policy
provider_publishing:readView provider submissionsread_apiwrite_api2 operations
- GET/provider-submissions/{submission_id}
- GET/providers/{provider_id}/submissions
provider_publishing:writeSubmit and manage provider versionswrite_api6 operations
provider_settings:manageInstall, upgrade and uninstall providerswrite_api6 operations
provider_settings:readView effective provider settingsread_apiwrite_api4 operations
publisher:manageRegister, update and verify own publisherwrite_api4 operations
publisher:readView publishersread_apiwrite_api2 operations
- GET/publishers
- GET/publishers/{publisher_id}
push_rule:manageManage push ruleswrite_apiwrite_repository4 operations
push_rule:readView push rulesread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/groups/{group_id}/push-rules
- GET/repositories/{repo_id}/push-rules
release:createCreate releases and upload release assetswrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/releases
- POST/repositories/{repo_id}/releases/{tag_name}/assets
release:deleteDelete releases and release assetswrite_apiwrite_repository2 operations
- DEL/repositories/{repo_id}/releases/{tag_name}
- DEL/repositories/{repo_id}/releases/{tag_name}/assets/{asset_id}
release:readView releases and download release assetsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository5 operations
release:updateUpdate releaseswrite_apiwrite_repository1 operation
- PATCH/repositories/{repo_id}/releases/{tag_name}
repo_member:addAdd repository memberswrite_api1 operation
- POST/repositories/{repo_id}/members
repo_member:readList repository membersread_apiwrite_api3 operations
repo_member:removeRemove repository memberswrite_api1 operation
- DEL/repositories/{repo_id}/members/{user_id}
repo_member:updateUpdate repository member roleswrite_api1 operation
- PUT/repositories/{repo_id}/members/{user_id}
repo:createCreate repositorieswrite_apiwrite_repository1 operation
- POST/repositories
repo:deleteDelete repositorieswrite_apiwrite_repository1 operation
- DEL/repositories/{repo_id}
repo:readView repositories and metadatamcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository12 operations
repo:starStar and unstar repositorieswrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/star
- DEL/repositories/{repo_id}/star
repo:transferTransfer repositories between groupswrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/transfer
- GET/repositories/{repo_id}/transfer-preview
repo:updateUpdate repositories and visibilitywrite_apiwrite_repository3 operations
reviewer:manageAdd and remove merge-request reviewersmcp_agent_writewrite_apiwrite_repository2 operations
- POST/repositories/{repo_id}/merge-requests/{mr_id}/reviewers
- DEL/repositories/{repo_id}/merge-requests/{mr_id}/reviewers/{reviewer_id}
reviewer:readList merge-request reviewersmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository1 operation
- GET/repositories/{repo_id}/merge-requests/{mr_id}/reviewers
reviewer:reviewApprove, reject and unapprove merge-request reviews3 operations
role:manageDefine, change and delete an organization's custom roles3 operations
- POST/groups/{group_id}/roles
- PATCH/roles/{role_id}
- DEL/roles/{role_id}
role:readSee an organization's custom roles and where they are usedread_apiwrite_api3 operations
- GET/groups/{group_id}/roles
- GET/roles/{role_id}
- GET/roles/{role_id}/usage
search:readSearch issues, merge requests, repositories, groups, releases and commentsmcp_agentmcp_agent_writeread_apiwrite_api3 operations
- GET/groups/{group_id}/search
- GET/repositories/{repo_id}/search
- GET/search
service_account:createCreate service accountswrite_api2 operations
- POST/groups/{group_id}/service-accounts
- POST/repositories/{repo_id}/service-accounts
service_account:deleteDelete service accountswrite_api1 operation
- DEL/service-accounts/{sa_id}
service_account:readView service accountsread_apiwrite_api4 operations
service_account:updateUpdate service accounts and avatarswrite_api3 operations
sso:manageManage the org's SSO connection, domains, and inviteswrite_api10 operations
sso:readRead the org's SSO connection and claimed domainsread_apiwrite_api4 operations
tag:createCreate tagswrite_apiwrite_repository1 operation
- POST/repositories/{repo_id}/tags
tag:deleteDelete tagswrite_apiwrite_repository1 operation
- DEL/repositories/{repo_id}/tags/{tag_name}
tag:readView tagsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository2 operations
- GET/repositories/{repo_id}/tags
- GET/repositories/{repo_id}/tags/{tag_name}
team:manageCreate, change and delete teams, and change who is on themwrite_api7 operations
team:readSee an organization's teams, who is on them and what they can doread_apiwrite_api6 operations
- GET/groups/{group_id}/teams
- GET/teams/{team_id}
- GET/teams/{team_id}/access
- GET/teams/{team_id}/members
- GET/teams/{team_id}/usage
- GET/user/teams
token:manageCreate and revoke access tokenswrite_api8 operations
token:readView access tokensread_apiwrite_api4 operations
tree:readBrowse repository trees and blobsmcp_agentmcp_agent_writeread_apiread_repositorywrite_apiwrite_repository19 operations
user:createCreate a user profilewrite_api1 operation
- POST/users
user:deleteDelete own user profilewrite_api1 operation
- DEL/users/{user_id}
user:readRead user profilesmcp_agentmcp_agent_writeread_apiwrite_api11 operations
- GET/user
- GET/user/contributions
- GET/user/egress-usage
- GET/user/legal-acceptances
- GET/user/legal-acceptances/pending
- GET/users
- GET/users/by-email/{email}
- GET/users/by-username/{username}
- GET/users/{user_id}
- GET/users/{user_id}/activity
- GET/users/{user_id}/contributions
user:updateUpdate own user profile and avatarwrite_api4 operations
webhook:manageManage webhooks and trigger redeliverieswrite_api10 operations
webhook:readView webhooks and deliveriesread_apiwrite_api8 operations
wiki:manageEnable or disable a wiki and change where it reads fromwrite_api2 operations
- PATCH/groups/{group_id}/wiki
- PATCH/repositories/{repo_id}/wiki
wiki:readRead wiki pages, their history and their backlinksmcp_agentmcp_agent_writeread_apiwrite_api16 operations
wiki:writeCreate, edit, move and delete wiki pageswrite_api14 operations