Skip to main content
This page is designed to give you a clear reference of what all of the scopes mean when generating Metadata API access tokens. It is imperative that you ensure only the scopes necessary for your use case are selected to avoid potential security risks.

​
Before you proceed

Please note that a Metadata API access token grants access to all workspaces in the instance the token was created. Each scope offers four different permission settings, as follows.
  • C (Create)
    • Create new data defined within this scope
  • R (Read)
    • Read data defined within this scope
  • U (Update)
    • Update existing data defined within this scope
  • D (Delete)
    • Delete data defined within this scope
You can quickly add or remove all permission settings by hovering over them and clicking + or -

​
What scopes should I use?

While it’s hard to answer this question without specific knowledge of your use case, here are some examples of proper scoping that might make sense.

​
WeWeb

To use WeWeb’s Xano plugin(s), you’ll need the following scopes.

​
Monitoring and Logging

For monitoring and logging tools, you might need the following scopes.