Access
A program registers itself; a person opens its access.
Access is opened by a person. The program runs OAuth 2.1 with PKCE and gets a token for one workspace — with exactly the scopes it was granted.
The calls
GET /.well-known/oauth-protected-resource GET /.well-known/oauth-authorization-server POST /oauth/register GET /oauth/authorize?response_type=code&code_challenge_method=S256&… POST /oauth/token
An access token lives an hour. A refresh token lives thirty days and rotates on every exchange.
Scopes
- inbox:read
- read
- inbox:write
- inside
- send
- outside
- people:read
- read
- people:write
- inside
- products:read
- read
- products:write
- inside
- companies:read
- read
- companies:write
- inside
- deals:read
- read
- deals:write
- inside
- segments:read
- read
- segments:write
- inside
- campaigns:read
- read
- campaigns:write
- inside
- agents:read
- read
- agents:write
- inside
- channels:read
- read
- channels:write
- inside
- workspace:read
- read
- workspace:write
- inside
- calendar:read
- read
- calendar:write
- inside
- routing:read
- read
- routing:write
- inside
- contacts:write
- inside
- archive:read
- read
- archive:write
- inside
- dashboard:read
- read
- billing:read
- read
- events:read
- read
- events:write
- inside
Close access in the workspace settings: revoking kills the token and its refresh with it.