API scopes and permissions, by product

Workspace

1. workspaces:read — Workspaces (read): List workspaces and account details.
2. usage:read — Usage & billing (read): Numbers, minutes, texts and credits this billing period.

Inbound

1. numbers:read — Tracking numbers (read): Numbers, placements, locations, views and call counts.
2. calls:read — Calls (read): Call log: caller, time, answered/missed, duration, source.
3. attribution:read — Attribution (read): Visit, UTM, click ID and confidence per call.
4. recordings:read — Recordings (read): Signed listen links for recorded calls.
5. transcripts:read — Transcripts (read): Transcripts and AI summaries.
6. leads:read — Leads & outcomes (read): Lead status, value and next action.

Outbound

1. phone_lines:read — Phone lines (read): Business lines used for outbound calling.
2. outbound_calls:read — Outbound calls (read): Outbound call history (direction=outbound).
3. calls:place — Outbound calls (write): Click-to-call: ring your own staff line, then connect a customer who asked to be called. Pre-checked and capped.

SMS

1. sms:read — Messages (read): Messages, delivery timelines, senders, templates, balance.
2. sms:send — Messages (write): Send texts (uses credits), including free test-mode sends.
3. sms:read — Senders (read): Sender names and numbers with approval status.
4. sms:senders:write — Senders (write): Request sender names (approval stays with Call Bullet).
5. sms:read — Templates (read): Templates and their fields.
6. sms:templates:write — Templates (write): Create, update and delete templates.
7. sms:read — Delivery webhooks (read): List SMS webhooks for these workspaces.
8. sms:webhooks:write — Delivery webhooks (write): Register or disable webhooks for SMS delivery, click and sender events.

AI Agents

1. agents:read — Agents (read): Agents, roles, status, live version and numbers.
2. agents:write — Agents (write): Create and edit draft agents and attach numbers. Going live stays in Call Bullet.
3. agent_calls:read — Agent calls (read): Calls handled by agents: summary, outcome, caller request.
4. campaigns:read — Campaigns (read): Campaigns and contact status (consent, screening).
5. agent_tasks:read — Tasks & reports (read): Tasks, routines and their results.

Integrations

1. delivery:read — Google Ads / GA4 delivery (read): Conversion and event delivery evidence.

Presets

1. Everything (full access to all products): workspaces:read, usage:read, numbers:read, calls:read, attribution:read, recordings:read, transcripts:read, leads:read, phone_lines:read, outbound_calls:read, sms:read, sms:send, sms:read, sms:senders:write, sms:read, sms:templates:write, sms:read, sms:webhooks:write, agents:read, agent_calls:read, campaigns:read, agent_tasks:read, delivery:read
2. CRM reporting (read everything): workspaces:read, usage:read, numbers:read, calls:read, attribution:read, recordings:read, transcripts:read, leads:read, phone_lines:read, outbound_calls:read, sms:read, sms:read, sms:read, sms:read, agents:read, agent_calls:read, campaigns:read, agent_tasks:read, delivery:read
3. Full SMS app (send, senders, templates, webhooks): workspaces:read, sms:read, sms:send, sms:senders:write, sms:templates:write, sms:webhooks:write
4. Read everything + send SMS: workspaces:read, usage:read, numbers:read, calls:read, attribution:read, recordings:read, transcripts:read, leads:read, phone_lines:read, outbound_calls:read, sms:read, sms:read, sms:read, sms:read, agents:read, agent_calls:read, campaigns:read, agent_tasks:read, delivery:read, sms:send
5. Call tracking only: workspaces:read, numbers:read, calls:read, attribution:read, leads:read

Missing a scope?

The API returns 403 forbidden with the permission it needed. Create a new key with that switch on; existing keys keep their scopes.

Not available through the API (by design)

1. Placing calls or starting AI agent calls and campaigns — these need consent, TPS screening, caller-ID and spend checks in the app.
2. Buying or releasing numbers.
3. Changing or deleting any record.