Reference

Scopes & roles

Scopes, quick permission presets, MCP profiles and how roles limit a connection.

View MarkdownThis page is generated from the source code on every release.

A connection can only do work whose scope it holds, within its role (never above its creator) and on the accounts assigned to it.

Scopes

Code	Description	Operations
`accounts.read`	View accounts	22
`accounts.settings`	Account settings (run hours, limits, labels)	8
`accounts.manage`	Create / sign in / sign out / remove accounts	9
`messages.read`	Read chats and messages	23
`messages.send`	Send messages, mark as read, show typing	23
`messages.manage`	Edit / delete / forward / pin messages	9
`chats.manage`	Chat status, assignment, tags, notes, saved replies	6
`contacts.write`	Find people, save contacts, create group chats	7
`groups.join`	Join / leave groups	2
`groups.admin`	Manage groups	35
`groups.scan`	Scan group members	2
`profile.write`	Edit Telegram profile	6
`crm.read`	View people and lists	11
`crm.write`	Edit people, stages, tags, lists, import people	17
`crm.export`	Export people data	1
`crm.erase`	Permanently delete a person's data	1
`campaigns.write`	Create / edit campaigns	13
`campaigns.run`	Run / stop campaigns	5
`nurture.write`	Account nurture, schedules	8
`discovery.write`	Find groups, keywords, signals	7
`automation.write`	Configuration packs, routines, automation rules	10
`stats.read`	View stats and limits	4
`audit.read`	View logs and alerts	5
`infra.manage`	Workers, proxy	18
`members.manage`	Members and invitations	7
`integrations.manage`	API keys, all workspace webhooks, other connections	8
`webhooks.read`	View this connection's webhooks, deliveries, event catalog	8
`webhooks.manage`	Create / edit / send test / recover this connection's webhooks	11
`bots.manage`	Create / edit / delete account bots (via BotFather)	7

integrations.manage includes webhooks.read and webhooks.manage.

Name	Role	Scope
Read-only (`read`)	`viewer`	`accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read`
Operations (`operate`)	`agent`	`accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read`, `messages.send`, `messages.manage`, `chats.manage`, `contacts.write`, `crm.write`, `webhooks.read`, `webhooks.manage`
Setup (`setup`)	`manager`	`accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read`, `accounts.settings`, `campaigns.write`, `campaigns.run`, `nurture.write`, `discovery.write`, `automation.write`, `groups.join`, `groups.scan`, `webhooks.read`, `webhooks.manage`
Full access (`full`)	`manager`	*