Guides

Scopes

A key carries scopes; each operation requires exactly one. Grant the fewest you need.

The scopes of the contract. Each one has an anchor, so you can link to it.

ScopeAllowsOperationsMCP tools
account:readRead the account that made the request: its name, timezone, currency, country, add-ons, the API key with its scopes, and the usage limits. GET /api/v1/account is the first call of any integration, so this scope is the one to grant first.11
ai:askAsk the Filmo assistant a question about the account's data in natural language. It never writes, but each call spends AI credits of the account, and it can search the web.11
availability:readCheck item availability in a date range, and read the unavailabilities of a person, a vehicle or a space.22
availability:writeDeclare, correct, close and delete unavailabilities of a person, a vehicle or a space. Deleting an unavailability cannot be undone.33
collections:readRead the collections tree that the catalog is organized by.11
collections:writeCreate and rename collections, and move them within the tree.22
contacts:readRead contacts (customers and suppliers), their addresses and related contacts, and look contacts up by contact number.44
contacts:writeCreate, change and delete contacts, their addresses, commercial terms and related-contact links. Deleting a contact also deletes its relationships, notes, files, tasks, payment methods and customer portal access, and cannot be undone. Removing an address cannot be undone either.1010
contracts:readRead rental contracts with their document and signature status.22
contracts:writeValidate, sign, void and cancel rental contracts. Validating a contract numbers it and locks it. Voiding removes its validity. Cancelling a contract is terminal: a cancelled contract can no longer be signed. An already signed contract can only be undone by voiding the document.44
crm:readRead CRM opportunities and the pipelines they move through.44
crm:writeCreate and change opportunities, move them between stages, close them and link documents to them.55
custom-fields:readRead the definitions of the account's custom fields (identifier, type and accepted values), not the values stored on records.11
incidents:readRead incidents (broken, lost or damaged equipment) and the count of incidents by status.33
incidents:writeOpen and update incidents, and comment on them.33
internal-services:readRead internal services, the planned assignments that do not hang from an order.22
internal-services:writeCreate and change internal services.22
invoices:readRead invoices (with their lines), credit notes and proformas (totals and status; their lines are not published).77
invoices:writeValidate and void invoices and credit notes, change the commercial status of proformas, and create or update the mirror of an invoice issued by another system. Validating an invoice or a credit note numbers it, signs it and locks it, and neither can be edited afterwards; voiding keeps the number and cannot be undone. Voiding an invoice does not issue a credit note.66
items:readRead catalog items and their serialized units.44
items:writeCreate, change and delete items, including their pricing, physical properties, accessories, alternatives and variants, and update serialized units. Deleting an item also deletes its serialized units, notes, files and tasks, and cannot be undone.99
kits:readRead kits, the named groups of items that go out together.22
kits:writeCreate and change kits.22
notes:readRead the notes attached to an entity of the account.11
notes:writeWrite notes on entities of the account.11
orders:readRead rental orders and their lines.33
orders:writeCreate and change orders, and run actions on them (reserve, unreserve, cancel, archive, return line items). Cancelling an order cannot be undone through the API. Returning line items puts material back into stock, so a retry without the same Idempotency-Key returns it twice. Send your own key. Reserving deducts stock and creates the delivery and return tasks.77
planner:readRead the staff and fleet services of a date window, with who covers them, and the resources that can be assigned.22
planner:writeAssign resources to planner services and remove them.22
projects:readRead projects and the catalog of project types.33
projects:writeCreate, change and archive projects, and link or unlink orders to them.55
purchase-orders:readRead purchase orders to suppliers.22
purchase-orders:writeChange, approve and receive purchase orders. Receiving a purchase order registers new inventory, so a retry without the same Idempotency-Key duplicates the stock. Send your own key.33
quotes:readRead quotes (active version) and their lines.33
quotes:writeChange the commercial status of quotes. Confirming a version of a quote moves every other version of it to superseded.11
repair-tickets:readRead repair tickets.22
repair-tickets:writeCreate and change repair tickets, including their lines. Sending lines when updating a ticket replaces the whole set of lines: send all of them or none.22
schedule:readRead the consolidated schedule of a date range: projects, orders, tasks, internal services and order services.11
services:readRead services, the sellable lines that do not come from inventory.22
services:writeCreate and change services, pricing included.22
spaces:readRead warehouses and rentable spaces.22
spaces:writeChange and delete spaces, and replace their amenities and equipment and set their pricing. Deleting a space also deletes its notes, files, tasks, images and declared unavailabilities, and cannot be undone.44
staff:readRead staff members and check staff availability in a date range.33
staff:writeCreate, change and delete staff members (organizational data only). Deleting a staff member cannot be undone.33
subrents:readRead subrents, the equipment rented from other companies to cover a job.22
subrents:writeChange subrents.11
supplier-invoices:readRead invoices received from suppliers.22
supplier-invoices:writeValidate and void invoices received from suppliers. Validating a supplier invoice numbers it and locks it, and voiding keeps its number. Both need the purchases add-on.22
tags:readRead the tag vocabulary of the account.11
tags:writeCreate and delete tags, and assign or remove them on entities. Deleting a tag removes it from every entity that carried it, and cannot be undone.44
tasks:readRead tasks, schedule events and task types.33
tasks:writeCreate, change and delete tasks. Deleting a task cannot be undone.33
treasury:readRead treasury accounts, payments and payment methods, and the payments of an invoice.66
treasury:writeRecord, change and link payments. Recording a payment writes to your accounts: a retry without the same Idempotency-Key records it twice. Send your own key.33
users:readRead the people with access to the account, with their role and access status. Only administrators can call it.11
vehicles:readRead fleet vehicles and check fleet availability in a date range.33
vehicles:writeCreate, change and delete vehicles. Deleting a vehicle cannot be undone.33
workflows:readList the workflows of the account and whether each one is active. Definitions are not published.11
workflows:runStart a run of a workflow, as the Run button does in the app. The run executes in the background and does whatever the workflow's steps say, so it can change data in Filmo and may have effects outside Filmo. This is the broadest permission in the contract: a run does whatever the workflow's steps say. Grant it only to integrations that need to start workflows, and send your own Idempotency-Key.11

Read the account that made the request: its name, timezone, currency, country, add-ons, the API key with its scopes, and the usage limits. GET /api/v1/account is the first call of any integration, so this scope is the one to grant first.

Ask the Filmo assistant a question about the account's data in natural language. It never writes, but each call spends AI credits of the account, and it can search the web.

Check item availability in a date range, and read the unavailabilities of a person, a vehicle or a space.

Declare, correct, close and delete unavailabilities of a person, a vehicle or a space. Deleting an unavailability cannot be undone.

Read the collections tree that the catalog is organized by.

Create and rename collections, and move them within the tree.

Read contacts (customers and suppliers), their addresses and related contacts, and look contacts up by contact number.

Create, change and delete contacts, their addresses, commercial terms and related-contact links. Deleting a contact also deletes its relationships, notes, files, tasks, payment methods and customer portal access, and cannot be undone. Removing an address cannot be undone either.

Read rental contracts with their document and signature status.

Validate, sign, void and cancel rental contracts. Validating a contract numbers it and locks it. Voiding removes its validity. Cancelling a contract is terminal: a cancelled contract can no longer be signed. An already signed contract can only be undone by voiding the document.

Read CRM opportunities and the pipelines they move through.

Create and change opportunities, move them between stages, close them and link documents to them.

Read the definitions of the account's custom fields (identifier, type and accepted values), not the values stored on records.

Read incidents (broken, lost or damaged equipment) and the count of incidents by status.

Open and update incidents, and comment on them.

Read internal services, the planned assignments that do not hang from an order.

Create and change internal services.

Read invoices (with their lines), credit notes and proformas (totals and status; their lines are not published).

Validate and void invoices and credit notes, change the commercial status of proformas, and create or update the mirror of an invoice issued by another system. Validating an invoice or a credit note numbers it, signs it and locks it, and neither can be edited afterwards; voiding keeps the number and cannot be undone. Voiding an invoice does not issue a credit note.

Read catalog items and their serialized units.

Create, change and delete items, including their pricing, physical properties, accessories, alternatives and variants, and update serialized units. Deleting an item also deletes its serialized units, notes, files and tasks, and cannot be undone.

Read kits, the named groups of items that go out together.

Create and change kits.

Read the notes attached to an entity of the account.

Write notes on entities of the account.

Read rental orders and their lines.

Create and change orders, and run actions on them (reserve, unreserve, cancel, archive, return line items). Cancelling an order cannot be undone through the API. Returning line items puts material back into stock, so a retry without the same Idempotency-Key returns it twice. Send your own key. Reserving deducts stock and creates the delivery and return tasks.

Read the staff and fleet services of a date window, with who covers them, and the resources that can be assigned.

Assign resources to planner services and remove them.

Read projects and the catalog of project types.

Create, change and archive projects, and link or unlink orders to them.

Read purchase orders to suppliers.

Change, approve and receive purchase orders. Receiving a purchase order registers new inventory, so a retry without the same Idempotency-Key duplicates the stock. Send your own key.

Read quotes (active version) and their lines.

Change the commercial status of quotes. Confirming a version of a quote moves every other version of it to superseded.

Read repair tickets.

Create and change repair tickets, including their lines. Sending lines when updating a ticket replaces the whole set of lines: send all of them or none.

Read the consolidated schedule of a date range: projects, orders, tasks, internal services and order services.

Read services, the sellable lines that do not come from inventory.

Create and change services, pricing included.

Read warehouses and rentable spaces.

Change and delete spaces, and replace their amenities and equipment and set their pricing. Deleting a space also deletes its notes, files, tasks, images and declared unavailabilities, and cannot be undone.

Read staff members and check staff availability in a date range.

Create, change and delete staff members (organizational data only). Deleting a staff member cannot be undone.

Read subrents, the equipment rented from other companies to cover a job.

Change subrents.

Read invoices received from suppliers.

Validate and void invoices received from suppliers. Validating a supplier invoice numbers it and locks it, and voiding keeps its number. Both need the purchases add-on.

Read the tag vocabulary of the account.

Create and delete tags, and assign or remove them on entities. Deleting a tag removes it from every entity that carried it, and cannot be undone.

Read tasks, schedule events and task types.

Create, change and delete tasks. Deleting a task cannot be undone.

Read treasury accounts, payments and payment methods, and the payments of an invoice.

Record, change and link payments. Recording a payment writes to your accounts: a retry without the same Idempotency-Key records it twice. Send your own key.

Read the people with access to the account, with their role and access status. Only administrators can call it.

Read fleet vehicles and check fleet availability in a date range.

Create, change and delete vehicles. Deleting a vehicle cannot be undone.

List the workflows of the account and whether each one is active. Definitions are not published.

Start a run of a workflow, as the Run button does in the app. The run executes in the background and does whatever the workflow's steps say, so it can change data in Filmo and may have effects outside Filmo. This is the broadest permission in the contract: a run does whatever the workflow's steps say. Grant it only to integrations that need to start workflows, and send your own Idempotency-Key.

Was this page helpful?