Scopes
Each key carries the scopes ticked when it was created. A request outside them answers 403.
Available scopes#
| Scope | Allows |
|---|---|
leads:read | List and read leads |
leads:write | Create and update leads (includes read) |
accounts:read | List and read accounts |
accounts:write | Create and update accounts (includes read) |
deals:read | List and read deals |
deals:write | Create and update deals (includes read) |
records:read | List custom objects, list and read their records |
records:write | Create and update custom object records (includes read) |
One key per integration#
Give each integration its own key with only the scopes it needs. Then you can revoke one without touching the others, and the key’s “last used” time tells you which integrations are still running.