Scope Format
Scopes follow the format:service:resource:action
- service: The Delino service (e.g.,
real-prompter) - resource: The resource type (e.g.,
project,prompt,chat) - action: The operation (e.g.,
read,create,delete)
Wildcard Scopes
Full Access
*Grants access to all public API services and operationsAll Real Prompter Operations
real-prompter:*Full access to Real Prompter serviceReal Prompter Scopes
Real Prompter provides prompt engineering through interactive conversations.Project Operations
Project Operations
Description: Create new prompt projectsUse Cases:
- Automated project provisioning
- Integration tools that create projects
- Workflow automation
Description: View project informationUse Cases:
- Dashboard applications
- Project listing tools
- Monitoring systems
Description: Delete projectsUse Cases:
- Admin tools
- Cleanup automation
- Project management integrations
Prompt Operations
Prompt Operations
Description: Create and improve promptsUse Cases:
- Prompt creation tools
- Automated prompt generation
- Content creation workflows
Description: View prompt content and versionsUse Cases:
- Prompt browsers
- Version control integrations
- Analytics tools
Description: Request prompt improvementsUse Cases:
- AI-assisted prompt optimization
- Automated refinement workflows
- Quality enhancement tools
Description: Revert to previous versionsUse Cases:
- Version management tools
- Rollback automation
- Change control systems
Chat Operations
Chat Operations
Description: Send messages in chat sessionsUse Cases:
- Chat bots
- Interactive applications
- Automated conversation tools
Description: View chat historyUse Cases:
- Chat viewers
- Analytics tools
- Conversation export tools
Description: Delete chat messagesUse Cases:
- Moderation tools
- Privacy management
- Data cleanup automation
Subset Operations
Subset Operations
Diagram Operations
Diagram Operations
Description: View project diagramsUse Cases:
- Visualization tools
- Documentation generation
- Project overview displays
Wildcard
Wildcard
Description: All Real Prompter operationsGrants access to all Real Prompter service operations including projects, prompts, chats, subsets, and diagrams.
Scope Validation
How Scopes Are Validated
When an API request is made with an API key:- Extract Token: The API key token is extracted from the request
- Retrieve Scopes: The key’s scopes are fetched from the database
- Check Permission: The required scope is checked against the key’s scopes
- Wildcard Matching: Wildcards are evaluated hierarchically
- Grant/Deny: Access is granted or denied based on the match
Validation Rules
Common Scope Combinations
Read-Only Access
Content Creation
Chat Bot Integration
Full Project Management
Full Platform Access
Best Practices
Start Minimal
Start Minimal
Begin with the minimum required scopes and add more only when needed.Example: Start with
real-prompter:project:read instead of real-prompter:*Use Resource Wildcards
Use Resource Wildcards
For specific resources, use resource-level wildcards instead of service-level access.Example: Use
real-prompter:project:* instead of real-prompter:* if only managing projectsSeparate Keys
Separate Keys
Create different keys for different purposes with appropriate scopes.Example: Separate keys for read-only dashboards, chat bots, and project management
Document Scopes
Document Scopes
Document why each scope is needed in your internal documentation.Example: “real-prompter:chat:send - Required for customer support chatbot integration”
Audit Regularly
Audit Regularly
Review scope assignments regularly and remove unnecessary permissions.Example: Monthly audit of API keys and their scopes
