Skip to main content
Every content type has four scopes, under a master that holds them all. Grant a key only the ones its app needs: the site refuses anything else with 403, and the message names the scope that was missing.

Read

content:<type>:read lists and reads the published documents.

Write

content:<type>:write creates and changes drafts, and reads them.

Publish

content:<type>:publish takes a draft live, and unpublishes. Types without drafts have none.

Delete

content:<type>:delete deletes, archives and restores.
On a type with drafts, a write in published mode (the default) saves the draft and publishes it in one call, so it needs the publish scope too; send aposMode=draft to change only the draft. A type without drafts (redirects, photo feeds, the media folders) writes live on its write scope alone, and so do images and files, which publish on every save.
A master holds everything beneath it: content:<type>:all a type’s four scopes, content:all every content type, and admin:all every scope there is. See Authentication for the other families.

By content type

Everything here: content:pages:all (or content:all, admin:all).
Everything here: content:images:all (or content:all, admin:all).
Everything here: content:files:all (or content:all, admin:all).
Everything here: content:videos:all (or content:all, admin:all).
Everything here: content:blog:all (or content:all, admin:all).
Everything here: content:blog-categories:all (or content:all, admin:all).
Everything here: content:authors:all (or content:all, admin:all).
Everything here: content:team-members:all (or content:all, admin:all).
Everything here: content:testimonials:all (or content:all, admin:all).
Everything here: content:faq-items:all (or content:all, admin:all).
Everything here: content:faq-categories:all (or content:all, admin:all).
Everything here: content:service-areas:all (or content:all, admin:all).
Everything here: content:google-reviews:all (or content:all, admin:all).
Everything here: content:instagram-posts:all (or content:all, admin:all).
Everything here: content:photo-albums:all (or content:all, admin:all).
Everything here: content:photo-feeds:all (or content:all, admin:all).
Everything here: content:forms:all (or content:all, admin:all).
Everything here: content:redirects:all (or content:all, admin:all).
Everything here: global:all (or admin:all).
Everything here: languages:all (or admin:all).