Read Scopes

The public API page names read scopes such as accounts.read, domains.read, websites.read, email.read, databases.read, ssl.read, backups.read, cron.read, jobs.read, services.read, settings.read, and platform.read.

Practice

• Name tokens after the integration, not after the person who created them.
• Use comma-separated scope labels that describe intended access.
• Avoid using * for third-party systems unless there is a clear provider-level reason.
• Document who owns the integration and where the token is stored.

PCAdmin

Use PCAdmin → API Tokens to create and review token names, scope labels, status, last used time, and expiry.

Troubleshooting

• For 401, verify token validity and user status.
• For 403, check whether the endpoint requires an admin-capable role.
• For empty results, check whether the token user owns any hosting accounts.