> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orbitforms.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# App Permissions

> OAuth scopes define what your app can access on behalf of users. Request only the permissions your app needs—users are more likely to approve apps that request minimal access.

<Info>
  **Principle of Least Privilege** — Only request scopes that are essential for your app's core functionality. You can always request additional permissions later if needed.
</Info>

## Forms

| Scope          | Description                                    |
| -------------- | ---------------------------------------------- |
| `forms:read`   | Read form configurations, fields, and settings |
| `forms:write`  | Create and update forms                        |
| `forms:delete` | Delete forms                                   |

## Submissions

| Scope                | Description                         |
| -------------------- | ----------------------------------- |
| `submissions:read`   | Read form submissions and responses |
| `submissions:write`  | Update submission data              |
| `submissions:delete` | Delete form submissions             |

## Contacts

| Scope             | Description                                  |
| ----------------- | -------------------------------------------- |
| `contacts:read`   | Read contacts and tags                       |
| `contacts:write`  | Create, update, and manage contacts and tags |
| `contacts:delete` | Delete contacts                              |

## Team

| Scope        | Description           |
| ------------ | --------------------- |
| `team:read`  | Read team information |
| `team:write` | Update team settings  |

## Webhooks

| Scope            | Description                             |
| ---------------- | --------------------------------------- |
| `webhooks:read`  | Read webhook configurations             |
| `webhooks:write` | Create and manage webhook subscriptions |

## Analytics

| Scope            | Description                      |
| ---------------- | -------------------------------- |
| `analytics:read` | Read form analytics and insights |

## Requesting Scopes

Include the scopes you need in the authorization URL as a space-separated list:

```
scope=forms:read submissions:read webhooks:read webhooks:write
```

## Common Scope Combinations

### Read-only Dashboard

View forms and submissions without making changes

`forms:read` `submissions:read`

### Form Builder

Create and manage form configurations

`forms:read` `forms:write`

### Full Integration

Complete access for building comprehensive integrations

`forms:read` `forms:write` `submissions:read` `webhooks:read` `webhooks:write`

## Next Steps

<CardGroup cols={2}>
  <Card title="OAuth Setup" icon="file-text" href="/apps/oauth">
    Implement the authorization flow
  </Card>

  <Card title="App Review" icon="check-circle" href="/apps/overview">
    Submit for marketplace listing
  </Card>
</CardGroup>