SupportProduction scopes reference
Review all 140 production-eligible Lead360 private integration scopes, their product groups, risk tiers, effect categories, confirmation requirements, and agency-owner restrictions.
How this fits into Lead360Explore the Lead360 platformConnect API and MCP access with the agency, tenant, scope, and risk model.Lead360 workflow mapProduction scopes reference
- 01
How scopes control access
- 02
Choose the minimum scopes
- 03
Complete production scope catalog
- 04
Scope lifecycle
How scopes control access
A scope is a technical permission selected when a private integration token is created. Operation discovery requires all technical scopes declared by an operation. Direct execution also requires the credential to remain active, the location to remain eligible, any related service to be enabled, and the operation to satisfy the current production policy.
Scope possession is necessary but not sufficient for a live effect. The version 2 public boundary directly executes only reviewed read adapters. Write, destructive, send, publish, and financial operations remain approval-required even when their scope appears on the token.
Choose the minimum scopes
- List the exact records and outcomes required by the integration purpose.
- Select read-only scopes for retrieval, reporting, comparison, and validation.
- Avoid legacy granular scopes when a smaller modern module scope better matches the operation.
- Review every yellow and red ability with the business owner and security owner.
- Grant agency-owner-only groups only from the agency owner account.
- Test discovery and verify unrelated operations are absent.
- Create a separate credential when another system needs a different purpose or access level.
Complete production scope catalog
Conversations
| Scope | Description | Risk | Effect |
|---|---|---|---|
| conversations_create | Manually start a new conversation thread. | yellow | customer record write |
| conversations_get-details | Fetch metadata (assigned user, status) for a thread. | green | read |
| conversations_update | Change status (Open/Closed/Snoozed) or assign to agent. | yellow | customer record write |
| conversations_delete | Permanently remove a conversation thread. | red | destructive |
| conversations_get-unread | Get the total count of unread messages. | green | read |
| conversations_mark-read | Mark a conversation or specific message as read. | yellow | customer record write |
| conversations_mark-unread | Mark a conversation as unread to review later. | yellow | customer record write |
| conversations_archive | Move a conversation to the archive. | yellow | customer record write |
| conversations_upload-file | Upload an image/PDF to send in a message. | yellow | customer record write |
| conversations_cancel-message | Stop a scheduled message from being sent. | red | destructive |
| conversations_get-emails | Filter conversation to show only email exchanges. | green | read |
| conversations_search-content | Find specific text/keywords inside a chat history. | green | read |
| conversations_assign | Assign a thread to a specific user ID. | yellow | customer record write |
| conversations_get-recording | Retrieve the audio file from a call in the thread. | green | read |
| conversations_create-inbound | Log an external interaction (like a walk-in) into the thread. | yellow | customer record write |
| conversations_add-follower | Add a team member to watch the conversation. | yellow | customer record write |
| conversations_remove-follower | Stop a team member from receiving notifications for this thread. | red | destructive |
Calendars and Appointments
| Scope | Description | Risk | Effect |
|---|---|---|---|
| calendars_get-all | List all calendars in the sub-account. | green | read |
| calendars_get-by-id | Get configuration settings for a specific calendar. | green | read |
| calendars_create | Create a new calendar service. | yellow | customer record write |
| calendars_update | Edit calendar settings (slots, duration, name). | yellow | customer record write |
| calendars_delete | Remove a calendar service entirely. | red | destructive |
| calendars_groups_get | List groups (teams) of calendars. | green | read |
| calendars_groups_create | Create a new grouping for team scheduling. | yellow | customer record write |
| calendars_groups_delete | Remove a calendar group. | red | destructive |
| calendars_appt_get | Get details of a single appointment. | green | read |
| calendars_appt_create | Book a new appointment manually. | yellow | customer record write |
| calendars_appt_update | Change time, calendar, or status of an appointment. | yellow | customer record write |
| calendars_appt_delete | Cancel/Delete an appointment. | red | destructive |
| calendars_appt_mark-showed | Update status to 'Showed'. | yellow | customer record write |
| calendars_appt_mark-noshow | Update status to 'No-Show'. | yellow | customer record write |
| calendars_appt_mark-cancelled | Update status to 'Cancelled'. | red | destructive |
| calendars_slots_get-free | Check available times for a specific date range. | green | read |
| calendars_slots_get-blocked | See times that are manually blocked off. | yellow | customer record write |
| calendars_slots_block | Manually block time on a calendar (e.g., 'Lunch'). | yellow | customer record write |
| calendars_slots_unblock | Remove a manual block. | red | destructive |
| calendars_resources_get | List rooms or equipment associated with calendars. | green | read |
| calendars_resources_create | Add a new room/equipment resource. | yellow | customer record write |
| calendars_resources_update | Modify resource details. | yellow | customer record write |
| calendars_resources_delete | Remove a resource. | red | destructive |
| calendars_appt_validate | Check if a requested time is valid before booking. | green | read |
| calendars_team_get | See which users are assigned to a calendar. | green | read |
| calendars_team_add | Assign a user to a round-robin calendar. | yellow | customer record write |
| calendars_team_remove | Remove a user from a calendar. | red | destructive |
| calendars_notifications_get | Check who gets emailed when an appt is booked. | green | read |
| calendars_notifications_update | Change email/SMS alert settings. | yellow | customer record write |
| calendars_force-availability | Override blocks to book an urgent slot. | yellow | customer record write |
| calendars_check-conflicts | Check if a user is double-booked across calendars. | green | read |
| calendars_appt_reschedule | Specific endpoint to move an appt and trigger notifications. | yellow | customer record write |
Contacts
| Scope | Description | Risk | Effect |
|---|---|---|---|
| contacts_delete | Permanently delete a contact. | red | destructive |
| contacts_bulk-delete | Delete a list of contacts by ID. | red | destructive |
| contacts_merge | Merge duplicate contacts (Source -> Destination). | red | destructive |
| contacts_fields_get | Retrieve custom field values for a specific contact. | green | read |
| contacts_notes_create | specific endpoint to add a text note to a profile. | yellow | customer record write |
| contacts_notes_get | Retrieve history of manual notes. | green | read |
| contacts_notes_update | Edit an existing note. | yellow | customer record write |
| contacts_notes_delete | Remove a note. | red | destructive |
| contacts_campaign_add | Manually drop a contact into a legacy campaign. | yellow | customer record write |
| contacts_campaign_remove | Remove contact from a campaign. | red | destructive |
| contacts_workflow_add | Trigger a workflow automation for this contact. | yellow | customer record write |
| contacts_workflow_remove | Stop a specific workflow for this contact. | red | destructive |
| contacts_set-dnd | Stop all automated marketing to this contact. | yellow | customer record write |
| contacts_remove-dnd | Re-enable marketing. | red | destructive |
| contacts_get-active-flows | See which automations are currently running on them. | green | read |
| contacts_get-appointments | List all past/future appts for this specific person. | green | read |
| contacts_upload-file | Attach a document to the contact record. | yellow | customer record write |
| contacts_get-business | Fetch business-specific data associated with the contact. | green | read |
Pipeline and Opportunities
| Scope | Description | Risk | Effect |
|---|---|---|---|
| opportunities_create | Create a new deal/opportunity. | yellow | customer record write |
| opportunities_delete | Remove an opportunity. | red | destructive |
| opportunities_upsert | Create if not exists, otherwise update. | yellow | customer record write |
| opportunities_update-stage | Quickly move a deal to the next column/stage. | yellow | customer record write |
| opportunities_update-status | Mark as Won, Lost, or Abandoned. | yellow | customer record write |
| opportunities_stages_get | Get valid stages for a specific pipeline ID. | green | read |
Payments
| Scope | Description | Risk | Effect |
|---|---|---|---|
| payments_subscriptions_list | See all recurring billing profiles. | red | financial |
| payments_subscriptions_get | Get details on a specific recurring payment. | red | financial |
| payments_subscriptions_cancel | Stop a recurring payment. | red | financial |
| payments_invoices_list | Retrieve a history of sent invoices. | red | financial |
Campaigns and Sites
| Scope | Description | Risk | Effect |
|---|---|---|---|
| campaigns_get-all | List all available marketing campaigns. | green | read |
| campaigns_start | Trigger a campaign for a list of contacts. | red | external send publish |
| campaigns_pause | Pause a running campaign. | yellow | customer record write |
| sites_funnels_get | List all funnels. | green | read |
| sites_funnels_steps | Get the specific pages/steps inside a funnel. | green | read |
| sites_websites_get | List all websites. | green | read |
| sites_websites_pages | Get the specific pages inside a website. | green | read |
Conversation Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| conversations.readonly | Read conversations, messages, and emails | green | read |
| conversations.write | Send messages and manage conversations | yellow | customer record write |
Calendar Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| calendars.readonly | Read appointments, events, and schedules | green | read |
| calendars.write | Create and manage appointments and events | yellow | customer record write |
Contact Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| contacts.readonly | Read contacts, tasks, notes, and tags | green | read |
| contacts.write | Create and manage contacts and related data | yellow | customer record write |
Pipeline Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| opportunities.readonly | Read opportunities and pipeline data | green | read |
| opportunities.write | Create and manage opportunities and stages | yellow | customer record write |
Payments and Checkout Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| payments.readonly | Read orders, subscriptions, transactions, and coupons | red | financial |
| payments.write | Process payments and manage subscriptions | red | financial |
Campaign Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| campaigns.readonly | Read marketing campaigns and performance | green | read |
| campaigns.write | Create and manage campaigns | yellow | customer record write |
Sites and Forms Access
| Scope | Description | Risk | Effect |
|---|---|---|---|
| sites.readonly | Read funnels, forms, and pages | green | read |
| sites.write | Create and manage funnels, forms, and pages | yellow | customer record write |
Webhook Events
| Scope | Description | Risk | Effect |
|---|---|---|---|
| webhooks.readonly | Read tenant webhook registrations and delivery status | green | read |
Custom Objects
| Scope | Description | Risk | Effect |
|---|---|---|---|
| objects.readonly | Read object definitions, records, fields, reports, and relationships | green | read |
| objects.write | Create and manage object definitions, records, fields, and relationships | yellow | internal write |
Custom Fields
| Scope | Description | Risk | Effect |
|---|---|---|---|
| custom_fields.readonly | Read tenant custom-field definitions | green | read |
| custom_fields.write | Create and manage tenant custom-field definitions | yellow | customer record write |
Custom Values
| Scope | Description | Risk | Effect |
|---|---|---|---|
| custom_values.readonly | Read tenant custom values and folders | green | read |
| custom_values.write | Create and manage tenant custom values and folders | yellow | customer record write |
Tags
| Scope | Description | Risk | Effect |
|---|---|---|---|
| tags.readonly | Read tenant tag definitions | green | read |
| tags.write | Create and manage tenant tag definitions | yellow | customer record write |
Service Menus
| Scope | Description | Risk | Effect |
|---|---|---|---|
| service_menus.readonly | Read service menus, categories, services, staff, and availability rules | green | read |
| service_menus.write | Create and manage service menus, categories, services, and staff assignments | yellow | customer record write |
Catalogue
| Scope | Description | Risk | Effect |
|---|---|---|---|
| catalogue.readonly | Read tenant products, services, variants, and availability | green | read |
| catalogue.write | Create and manage tenant catalogue items and variants | yellow | customer record write |
Memberships
| Scope | Description | Risk | Effect |
|---|---|---|---|
| memberships.readonly | Read membership plans, members, agreements, and compliance status | green | read |
| memberships.write | Create and manage membership plans and member lifecycle actions | yellow | customer record write |
Gift Cards
| Scope | Description | Risk | Effect |
|---|---|---|---|
| gift_cards.readonly | Read tenant gift-card products, balances, and delivery status | red | financial |
| gift_cards.write | Create and manage tenant gift-card products and deliveries | red | financial |
Promo Codes
| Scope | Description | Risk | Effect |
|---|---|---|---|
| promo_codes.readonly | Read tenant promotional-code definitions and status | red | financial |
| promo_codes.write | Create and manage tenant promotional-code definitions | red | financial |
Business Profile
| Scope | Description | Risk | Effect |
|---|---|---|---|
| business_profile.readonly | Read the tenant business profile and public business details | green | read |
| business_profile.write | Manage the tenant business profile and public business details | yellow | customer record write |
Chat Widgets
| Scope | Description | Risk | Effect |
|---|---|---|---|
| chat_widgets.readonly | Read tenant chat-widget configuration and status | green | read |
| chat_widgets.write | Create and manage tenant chat widgets | yellow | internal write |
Short Links
| Scope | Description | Risk | Effect |
|---|---|---|---|
| short_links.readonly | Read tenant short-link definitions and analytics | green | read |
| short_links.write | Create and manage tenant short links | yellow | customer record write |
Ask360 Pieces
| Scope | Description | Risk | Effect |
|---|---|---|---|
| ask360_pieces.readonly | Read tenant Ask360 Pieces, revisions, deployments, and audit history | green | read |
| ask360_pieces.write | Create and manage tenant Ask360 Piece drafts and resources | yellow | internal write |
| ask360_pieces.test | Run tenant-isolated Ask360 Piece Arena tests | yellow | internal write |
App Analytics
| Scope | Description | Risk | Effect |
|---|---|---|---|
| app_analytics.readonly | Read tenant application and mini-app analytics | green | read |
Email and Messaging
| Scope | Description | Risk | Effect |
|---|---|---|---|
| email_templates.readonly | Read tenant reusable email templates | green | read |
| email_templates.write | Create and manage tenant reusable email templates | yellow | customer record write |
| messages.sms.send | Send a one-to-one SMS to the enrolled tenant contact | red | external send publish |
| messages.email.send | Send a one-to-one email to the enrolled tenant contact | red | external send publish |
Teams
Agency owner| Scope | Description | Risk | Effect |
|---|---|---|---|
| mattermost:read | Read Teams data | green | read |
| mattermost:write | Manage Teams data | yellow | internal write |
Automations
Agency owner| Scope | Description | Risk | Effect |
|---|---|---|---|
| activepieces:read | Read automation data | green | read |
| activepieces:write | Manage automations | yellow | internal write |
Sites Builder
Agency owner| Scope | Description | Risk | Effect |
|---|---|---|---|
| frappe:read | Read sites and pages | green | read |
| frappe:write | Manage sites and pages | yellow | internal write |
Ask Lead360
Agency owner| Scope | Description | Risk | Effect |
|---|---|---|---|
| ask_lead360:read | Read Ask Lead360 status | red | privileged invocation |
Sales360
Agency owner| Scope | Description | Risk | Effect |
|---|---|---|---|
| sales360:read | Read Sales360 data | red | privileged invocation |
| sales360:invoke | Invoke the Sales360 agent | red | privileged invocation |
Scope lifecycle
Review scopes when the integration purpose changes, a provider or service is disconnected, a team owner changes, a product feature is retired, or Lead360 publishes a new contract version. Remove unused authority by creating a replacement credential with the smaller scope set and revoking the old key.
An unavailable scope must not be replaced with a broader neighboring permission. Confirm the intended operation exists in the current production registry and contact Lead360 Support when the documented capability is missing.
Frequently asked questions
How many production scopes are available?
The current private integration catalog contains 140 production-eligible location-scoped permissions across 34 groups.
Does a write scope allow direct API writes?
No. The scope permits discovery of matching reviewed contracts. The public execution boundary still returns approval_required for mutations.
Why are some service groups agency-owner only?
Teams, Automations, Sites Builder, Ask Lead360, and Sales360 can affect internal services or specialized product behavior, so only the agency owner can grant their eligible abilities.
Continue with Lead360
Use this workflow in Lead360
Put this guide into practice with a 14-day free trial of Lead360 Pro early access, or continue learning through the related collection.