Scopes

Scopes control which API areas an OAuth client is allowed to access. You assign scopes when creating an API access in the Offisy settings.

Setting up API access is described in the Help Center.

Available scopes

Scope	Label	Description	Unlocked endpoints
full_access	Full access	Access to all endpoints	All
appointments	Appointments	Retrieve and book appointments. GET /appointments and GET /appointments/{uuid} always require users in addition. For course appointments (with attendees and instructors) additionally customers.	GET /appointments, GET /appointments/{uuid}, GET /booking/available-slots, GET /booking/available-slots/batch, GET /booking/available-slots/next, POST /appointments/service
customers	Customers	Retrieve, create, and update customers	GET /customers, GET /customers/{uuid}, POST /customers, PUT /customers/{uuid}
services	Services	Retrieve services	GET /services, GET /services/{uuid}, GET /service/categories, GET /service/categories/{uuid}
company	Company	Retrieve company profile and tenants	GET /company, GET /tenancies, GET /tenancies/{uuid}
locations	Locations	Retrieve locations	GET /locations, GET /locations/{uuid}
users	Users	Retrieve users	GET /users, GET /users/{uuid}
executions	Service assignments	Retrieve service assignments — which users offer which service at which location	GET /executions
medicals	Medical fee services	Retrieve, create, and update medical fee services	GET /medicals, GET /medicals/{uuid}, POST /medicals, PUT /medicals/{uuid}

Note: A client with the full_access scope passes every scope check automatically — regardless of which scope is required at a given endpoint.