APIs & Scopes
The APIs & Scopes page lists all Zoho CRM API endpoints used by the Zepiq dashboard, along with their required authorization scopes. It lets you audit the permissions granted to your CRM connection.
Accessing the page
Go to Security & Audit → APIs & Scopes (?tab=apis).
Understanding OAuth scopes
A scope is a permission you grant to Zepiq during OAuth connection. Without the appropriate scope, the corresponding endpoint returns a 403 error (access denied).
| Scope | Access granted |
|---|---|
ZohoCRM.modules.ALL | Read all CRM modules (contacts, leads, deals, accounts…) |
ZohoCRM.users.READ | Read users, roles, and profiles |
ZohoCRM.org.READ | Organization information |
ZohoCRM.settings.ALL | Workflows, cadences, assignment rules, picklists, templates |
ZohoCRM.bulk.READ | Bulk data export |
Displayed columns
| Column | Description |
|---|---|
| Endpoint | Zoho API URL called |
| Method | GET, POST, PUT, DELETE |
| Required scope | OAuth scope needed for this endpoint |
| Status | Authorized (scope present) or Unauthorized (scope missing) |
| Last used | Date of last call from the dashboard |
Missing scope — what to do?
If an endpoint shows Unauthorized status, your CRM connection doesn't have the required scope. Solution:
- Go to CRM Connections (
?tab=crm-connections) - Click Reconnect next to the affected connection
- In the Zoho OAuth window, authorize the new permissions
- Return to the APIs page — the status changes to Authorized
"Reconnection required" badge
When a new scope is needed (after a Zepiq update), an amber Reconnection required badge appears in the sidebar. Reconnect your CRM to unlock the new features.
Frequently asked questions
Why are some endpoints "Unauthorized"? Your OAuth token was created before this scope was added to Zepiq. A reconnect is enough to activate it.
Can Zepiq modify my Zoho data? By default, Zepiq operates in read-only mode. No data is modified without explicit user action.
How do I know which scopes are currently active? The Status column shows in real time which scopes are authorized for your active connection.
The API returns a 401 error: your token has expired. Reconnect your CRM account from CRM Connections → Reconnect.
The API returns a 403 error: insufficient scope. Check the Required scope column to identify the missing permission, then reconnect.