Assign CIMD user consent scopes

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://openapi.logto.io/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Logto API references MCP server": {
    "url": "https://openapi.logto.io/mcp"
  }
}
Close
POST /api/cimd/user-consent-scopes
O auth2

Add scopes to the tenant-level permission ceiling for CIMD clients. Database-backed scopes are referenced by ID; Management API scopes can never be selected.

application/json

Body Required

  • organizationScopes array[string]
  • resourceScopes array[string]
  • organizationResourceScopes array[string]
  • userScopes array[string]

    Values are profile, email, phone, address, custom_data, identities, roles, urn:logto:scope:organizations, urn:logto:scope:organization_roles, or urn:logto:scope:sessions.

Responses

  • 201 application/json

    The scopes were assigned.

  • 400

    Bad Request

  • 401

    Unauthorized

  • 403

    Forbidden

  • 422

    Some scopes do not exist or are not allowed.

POST /api/cimd/user-consent-scopes 
curl \
 --request POST 'https://[tenant_id].logto.app/api/cimd/user-consent-scopes' \
 --header "Authorization: Bearer $ACCESS_TOKEN" \
 --header "Content-Type: application/json" \
 --data '{"organizationScopes":["string"],"resourceScopes":["string"],"organizationResourceScopes":["string"],"userScopes":["profile"]}'
Request examples 
{
  "organizationScopes": [
    "string"
  ],
  "resourceScopes": [
    "string"
  ],
  "organizationResourceScopes": [
    "string"
  ],
  "userScopes": [
    "profile"
  ]
}