What write access can a token have?

Composing posts (`posts.compose`), managing library assets (`media.manage`), managing webhook endpoints (`webhooks.manage` / `webhooks.delete`), managing clients (`clients.manage`), and minting account connect links (`accounts.connect`). The surface still excludes billing, team, and admin actions, and destructive account/post deletion.

API scopes and permissions

Browse docs

3 min read

Available API scopes and permissions#

Scope	Access	Grants
`agency.read`	read	Read workspace profile
`clients.read`	read	Read clients
`accounts.read`	read	Read connected social accounts
`posts.read`	read	Read posts and schedule
`analytics.read`	read	Read analytics
`reports.read`	read	Read reports
`besttimes.read`	read	Read best-time recommendations
`media.read`	read	Read content library
`webhooks.read`	read	Read webhook endpoints and delivery logs
`approvals.read`	read	Read the approval queue
`campaigns.read`	read	Read campaigns
`posts.compose`	write	Create and schedule posts
`approvals.decide`	write	Approve or reject pending posts
`media.manage`	write	Upload and manage library assets
`clients.manage`	write	Create and manage clients
`accounts.connect`	write	Generate account connect links
`webhooks.manage`	write	Create and manage webhook endpoints
`webhooks.delete`	write	Delete webhook endpoints
`campaigns.manage`	write	Create and manage campaigns

Generated from the live scope catalog — always current.

scopespermissionsrbac

FAQ

What write access can a token have?: Composing posts (`posts.compose`), managing library assets (`media.manage`), managing webhook endpoints (`webhooks.manage` / `webhooks.delete`), managing clients (`clients.manage`), and minting account connect links (`accounts.connect`). The surface still excludes billing, team, and admin actions, and destructive account/post deletion.

API scopes and permissions

Available API scopes and permissions#

FAQ

Ready to broadcast everywhere?