> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mentionpath.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Scopes and approvals

> How Mentionpath scopes REST tokens and when write actions require human approval.

Every token carries an explicit list of scopes. Reads succeed when the token has the matching scope and access to the target domain. Writes may return `202` with `APPROVAL_REQUIRED` when the token is not allowed to auto-approve the action.

## Baseline (read) scopes

| Scope               | Access                                   |
| ------------------- | ---------------------------------------- |
| `domains:read`      | List domains in the workspace            |
| `prompts:read`      | Read prompt definitions                  |
| `visibility:read`   | AI visibility and mention analytics      |
| `audits:read`       | Site audit summaries and issues          |
| `competitors:read`  | Tracked competitors                      |
| `traffic:read`      | GA4 and Search Console summaries         |
| `articles:read`     | Articles                                 |
| `integrations:read` | Integration status and Webflow CMS reads |

## Elevated (write) scopes

| Scope                | Access                               |
| -------------------- | ------------------------------------ |
| `prompts:write`      | Create and update prompts            |
| `prompts:delete`     | Delete prompts (never auto-approved) |
| `audits:trigger`     | Start site audits                    |
| `competitors:manage` | Add competitors                      |
| `integrations:write` | Create or update Webflow CMS drafts  |
| `domains:manage`     | Create and manage domains            |
| `articles:write`     | Create and update articles           |

## Approval flow

When a write returns approval required:

```json theme={null}
{
  "status": "APPROVAL_REQUIRED",
  "approvalRequestId": "uuid",
  "approvalUrl": "https://app.mentionpath.ai/..."
}
```

An organization owner or admin approves the action in **Account → Approvals**. You can allow specific write actions to auto-approve per token under **Account → API** when the action's scope is granted.

<Tip>
  REST and MCP share the same scope and approval rules. A token that can call `POST /domains/{id}/prompts` behaves the same as the `prompts_create` MCP tool.
</Tip>

## Restricted scopes

These scopes are not granted to API or MCP tokens by default:

* `approvals:resolve` — approve or deny pending requests (human/UI first)
* `permissions:manage` — org role and permission administration