Documentación de la API Mokapen

Scopes y permisos

Los scopes controlan qué recursos de la API puede leer o escribir tu aplicación. Cada scope tiene un nivel de acceso asociado a los roles de los miembros de la organización.

Scope Nivel de acceso Descripción Roles permitidos
tasks.read Público Read tasks owner, user, member, limited_user, guest, admin
tasks.write Semi Create or update tasks owner, member, admin
projects.read Público Read projects owner, user, member, limited_user, guest, admin
projects.write Semi Create or update projects owner, member, admin
appointments.read Público Read appointments owner, user, member, limited_user, guest, admin
appointments.write Semi Create or update appointments owner, member, admin
bookings.read Público Read bookings owner, user, member, limited_user, guest, admin
bookings.write Semi Create or update bookings owner, member, admin
contacts.read Público Read contact data owner, user, member, limited_user, guest, admin
contacts.write Semi Create or update contacts owner, member, admin
companies.read Público Read company data owner, user, member, limited_user, guest, admin
companies.write Semi Create or update companies owner, member, admin
deals.read Público Read deal data owner, user, member, limited_user, guest, admin
deals.write Semi Create or update deals owner, member, admin
quotes.read Público Read quote data owner, user, member, limited_user, guest, admin
quotes.write Semi Create or update quotes owner, member, admin
orders.read Público Read order data owner, user, member, limited_user, guest, admin
orders.write Semi Create or update orders owner, member, admin
invoices.read Público Read invoice data owner, user, member, limited_user, guest, admin
invoices.write Semi Create or update invoices owner, member, admin
services.read Público Read service data owner, user, member, limited_user, guest, admin
services.write Semi Create or update services owner, member, admin
products.read Público Read product data owner, user, member, limited_user, guest, admin
products.write Semi Create or update products owner, member, admin
tickets.read Público Read ticket data owner, user, member, limited_user, guest, admin
tickets.write Semi Create or update tickets owner, member, admin
news.read Público Read news posts owner, user, member, limited_user, guest, admin
documents.read Público Read document data owner, user, member, limited_user, guest, admin
documents.write Semi Create or update documents owner, member, admin
campaigns.read Público Read campaign data owner, user, member, limited_user, guest, admin
campaigns.write Semi Create or update campaigns owner, member, admin
presences.read Público Read presence records owner, user, member, limited_user, guest, admin
presences.write Semi Create or update presence records owner, member, admin
shifts.read Público Read shift assignments owner, user, member, limited_user, guest, admin
shifts.write Semi Create or update shift assignments owner, member, admin
timesheets.read Público Read timesheet entries owner, user, member, limited_user, guest, admin
timesheets.write Semi Create or update timesheet entries owner, member, admin
entities.read Público Read custom entity modules owner, user, member, limited_user, guest, admin
entities.write Semi Create or update custom entity modules owner, member, admin
profile.write Semi Update profile roles and preferences owner, member, admin
users.write Semi Manage teams and team members owner, member, admin

Cómo funcionan los scopes

Al crear la aplicación seleccionas los scopes que puede solicitar. En runtime, el token debe incluir el scope que exige el endpoint (ej. tasks.read para listar las tasks).

En las aplicaciones public (third-party), Mokapen también verifica que el rol del usuario autenticado en la organización esté permitido para cada nivel de scope.

  • Public — disponible para owner, admin, user, member, limited_user y guest.
  • Semi-restricted — disponible para owner, member y admin.
  • Restricted — disponible solo para owner (incluye profile.write y users.write para perfil y gestión del equipo).

Solicitar los scopes

App public: pasa los scopes como lista separada por espacios en la URL OAuth authorize y en la solicitud de token.

App private: los scopes se toman de la configuración de la aplicación al generar el token.

scope=tasks.read tasks.write contacts.read companies.read

Empieza a trabajar ahorrando tiempo.

o
Agendar una demo

¿Necesitas ayuda?