Tokens and Scopes

All endpoints are protected with Token Auth, with the possible exception of /token/create which additionally has ENV configuration.

The scopes are pretty straightforward and need to be provided when creating a token.

• token:create

• token:update

• token:read

• token:delete

• tweet:create

• tweet:update

• tweet:read

• tweet:delete

When setting up your environment, initially you would need to set ENABLE_CREATE to OPEN, this will allow the create path to work without a scope, at this point you should create a token with at least token:create and then update the environment to SCOPED and in the future use your token for further requests.