Authorization and Scopes
Scope checks are enforced per endpoint.
Available Scopes
| Scope | Company keys | Agency keys | Covers |
|---|---|---|---|
read:companies | Yes | Yes | company list; company-scoped keys also cover company detail, regions, sectors, competency matrix, and connected agencies |
read:trades | Yes | No | trades and trade detail |
read:rates | Yes | Yes | standalone rates |
read:projects | Yes | No | projects and project connected agencies |
read:workers | Yes | Yes | workers and worker document detail |
read:purchase-orders | Yes | No | purchase orders |
read:sites | Yes | Yes | site access, including agency access where permitted |
read:requisitions | Yes | Yes | requisitions |
read:assignments | Yes | Yes | assignments |
read:timesheets | Yes | Yes | timesheets and expenses |
read:invoices | Yes | Yes | invoices, AfP, and payment notices |
read:credit-notes | Yes | Yes | credit notes |
No broad super-key behavior is granted by default.