# Scopes for your OAuth App

Scopes let you specify the level of access your integration needs

Note: Scopes are only available for OAuth apps. Check out [our guide](/docs/guides/integrations/build-a-supabase-oauth-integration) to learn how to build an OAuth app integration.

Scopes restrict access to the specific [Supabase Management API endpoints](/docs/reference/api/introduction) for OAuth tokens. All scopes can be specified as read and/or write.

Scopes are set when you [create an OAuth app](/docs/guides/integrations/build-a-supabase-oauth-integration#create-an-oauth-app) in the Supabase Dashboard.

You can update scopes of your OAuth app at any time, but existing OAuth app users will need to re-authorize your app via the [OAuth flow](/docs/guides/integrations/build-a-supabase-oauth-integration#implementing-the-oauth-20-flow) to apply the new scopes.

## Available scopes

| Name             | Type    | Description                                                                                                                                                                                                                                              |
| ---------------- | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `Auth`           | `Read`  | Retrieve a project's auth configurationRetrieve a project's SAML SSO providers                                                                                                                                                                           |
| `Auth`           | `Write` | Update a project's auth configurationCreate, update, or delete a project's SAML SSO providers                                                                                                                                                            |
| `Database`       | `Read`  | Retrieve the database configurationRetrieve the pooler configurationRetrieve SQL snippetsCheck if the database is in read-only modeRetrieve a database's SSL enforcement configurationRetrieve a database's schema typescript types                      |
| `Database`       | `Write` | Create a SQL queryEnable database webhooks on the projectUpdate the project's database configurationUpdate the pooler configurationUpdate a database's SSL enforcement configurationDisable read-only mode for 15minsCreate a PITR backup for a database |
| `Domains`        | `Read`  | Retrieve the custom domains for a projectRetrieve the vanity subdomain configuration for a project                                                                                                                                                       |
| `Domains`        | `Write` | Activate, initialize, reverify, or delete the custom domain for a projectActivate, delete or check the availability of a vanity subdomain for a project                                                                                                  |
| `Edge Functions` | `Read`  | Retrieve information about a project's edge functions                                                                                                                                                                                                    |
| `Edge Functions` | `Write` | Create, update, or delete an edge function                                                                                                                                                                                                               |
| `Environment`    | `Read`  | Retrieve branches in a project                                                                                                                                                                                                                           |
| `Environment`    | `Write` | Create, update, or delete a branch                                                                                                                                                                                                                       |
| `Organizations`  | `Read`  | Retrieve an organization's metadataRetrieve all members in an organization                                                                                                                                                                               |
| `Organizations`  | `Write` | N/A                                                                                                                                                                                                                                                      |
| `Projects`       | `Read`  | Retrieve a project's metadataCheck if a project's database is eligible for upgradeRetrieve a project's network restrictionsRetrieve a project's network bans                                                                                             |
| `Projects`       | `Write` | Create a projectUpgrade a project's databaseRemove a project's network bansUpdate a project's network restrictions                                                                                                                                       |
| `Rest`           | `Read`  | Retrieve a project's PostgREST configuration                                                                                                                                                                                                             |
| `Rest`           | `Write` | Update a project's PostgREST configuration                                                                                                                                                                                                               |
| `Secrets`        | `Read`  | Retrieve a project's API keysRetrieve a project's secretsRetrieve a project's pgsodium config                                                                                                                                                            |
| `Secrets`        | `Write` | Create or update a project's secretsUpdate a project's pgsodium configuration                                                                                                                                                                            |
| `Storage`        | `Read`  | Retrieve a project's storage buckets.                                                                                                                                                                                                                    |
|                  |         |                                                                                                                                                                                                                                                          |