AI agents: fetch the documentation index at llms.txt. Markdown versions are available by appending .md to any page URL, including this page's markdown.
API scopes
Scoped permissions for Done Bear API keys and MCP OAuth — read, write, and admin.
Done Bear API credentials are scoped so an agent can request only the access it needs.
Scopes
| Scope | What it covers | Implies |
|---|---|---|
read | List and show tasks, projects, labels, teams, and workspace metadata | — |
write | Create and edit tasks, projects, labels, checklists, and comments | read |
admin | Workspaces, billing, members, and API keys | write, read |
API keys accept all three. The hosted MCP OAuth flow advertises read and write.
How to request a scope
Create a key from the CLI:
donebear api-key create "CI" --permissions read-only
donebear api-key create "Agent" --permissions full-accessread-only issues read. full-access issues read, write, and admin.
MCP clients request scopes during OAuth. Ask for when the job is listing and showing; add only when the agent must create or edit.
Published with Blode.md