Scopes
Scopes required by HeyTaco API endpoints.
Scopes determine what a token can do. A token has no access by default; it can only do what its scopes allow. Scopes are granted to tokens either at creation time, or when editing a token.
By default admins have access to all scopes, whereas member users have access to a limited number of scopes specified below. Scopes can also be revoked from any user (and consequently, any of their tokens) by an admin from Admin API Settings.
To gain access to additional scopes, users can submit a request to their HeyTaco admins from Profile > API.
Once a user has access to a scope, they can attach it to any token they create.
See a full list of the currently available scopes, where they apply, and who has access, below.
leaderboard
Available to all usersAccess to leaderboard types your team has enabled. If an admin turns a leaderboard on or off, this scope follows.
Endpoints (1)
- GET/leaderboard — Get a leaderboard
leaderboard:all
Needs admin approvalAccess to all leaderboard types, regardless of your team's leaderboard settings.
Endpoints (1)
- GET/leaderboard — Get a leaderboard

