> ## Documentation Index
> Fetch the complete documentation index at: https://api.docs.originone.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Scopes

> Every API token carries a set of scopes that determine which operations it can perform.

Every API token carries a set of OAuth-style scopes. Each endpoint requires a specific scope; a request made with a token that lacks the required scope is rejected with `401 Unauthorized`.

Scopes follow a predictable `resource.action` naming convention:

| Action | Meaning |
| - | - |
| `{resource}.list` | Read a paginated, filterable collection (`GET /{resource}s`). |
| `{resource}.read` | Read one record by ID (`GET /{resource}s/{id}`). |
| `{resource}.create` | Create a record (`POST /{resource}s`). |
| `{resource}.search` | Ranked or fuzzy search with its own contract (`POST /{resource}s/search`). |
| `{resource}.{action}` | A domain action with its own audit semantics, such as `order.cancel`. |

## Available scopes

| Scope | Grants access to |
| - | - |
| `order.create` | [Create a new order](/api-reference/orders/create) |
| `order.read` | [Get an order by ID](/api-reference/orders/get) |
| `order.participant.read` | The `participant` block in [Get an order](/api-reference/orders/get) and [List orders](/api-reference/orders/list) responses ([omitted](/responses#null-versus-omitted) without it) |
| `order.list` | [List orders](/api-reference/orders/list) |
| `order.cancel` | [Cancel an order](/api-reference/orders/cancel) |
| `agency.list` | [List agencies](/api-reference/agencies/list) |
| `agency.read` | [Get an agency](/api-reference/agencies/get) |
| `agency.jobCategories.read` | [Get a job category](/api-reference/job-categories/get) |
| `clinic.list` | [List clinics](/api-reference/clinics/list) |
| `clinic.read` | [Get a clinic by ID](/api-reference/clinics/get) |
| `clinic.search` | [Search for clinics](/api-reference/clinics/search) |
| `company.list` | [List companies](/api-reference/companies/list) |
| `company.read` | [Get a company](/api-reference/companies/get) |
| `location.list` | [List locations](/api-reference/locations/list) |
| `location.read` | [Get a location](/api-reference/locations/get) |
| `package.list` | [List packages](/api-reference/packages/list) |
| `package.read` | [Get a package](/api-reference/packages/get) |
| `service.list` | [List services](/api-reference/services/list) |
| `service.read` | [Get a service by ID](/api-reference/services/get) |

<Tip>
  Request only the scopes your integration needs. Narrow tokens are easier to audit and limit the impact if a token leaks.
</Tip>

To add scopes to an existing token or request a new token, contact Origin One.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.