generated: '2026-10-19'
method: derived
source: openapi/v12-openapi.json
schemes:
- name: oauth2
  source: openapi/v12-openapi.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://v12.sh/oauth/authorize
    tokenUrl: https://v12.sh/api/oauth/token
scopes:
- scope: findings:read
  description: 'The inbox: findings, their status, reports and comments.'
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: findings:write
  description: Change status, comment and update triage decisions.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: repos:read
  description: Repositories, branches, pull requests, tags and Steer instructions.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: repos:write
  description: Add public repositories to the workspace; owners can also add private repositories
    granted by GitHub, create repositories V12 hosts and push code to them.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: runs:manage
  description: Cancel runs.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: runs:read
  description: Runs, their progress and context documents.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: runs:share
  description: Create, change and revoke guest links that open a run to people outside the organization.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: runs:write
  description: Estimate and start runs; add or archive context documents.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: steers:write
  description: Create, edit, archive and restore Steers. Archiving detaches them from Autopilot
    rules; finding tags and run history are kept.
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json
- scope: user:read
  description: 'The member directory: usernames, emails and roles. Any key reads its own account,
    organization and credit balance without it.'
  flows:
  - authorizationCode
  sources:
  - openapi/v12-openapi.json