Repository navigation
API key scope catalog: derive from routes and expose for key-creation UX #615
Description
Context
src/auth/scopes.ts and src/middleware/adminAuth.ts define scopes (e.g. portfolio:read, goals:write, recurring_deposits:write, strategies:write, webhooks:manage, vault:write, alerts:manage, fiat:write — seen in scope-denied logs). The catalog is code-only.
Proposal
- Export a machine-readable scope catalog (name, description, risk level, endpoints covered)
- Admin API
GET /api/admin/keys/scopesfor the key-creation UI - Test that every
requireApiKeyScope/requireAdminScopecall site references a catalog entry (no ad-hoc strings)
Acceptance criteria
- Catalog generated or validated in CI
- Docs list all scopes with descriptions
Activity
ranjeetprabhatedu-dotcom commentedon Oct 19, 2026
Hello maintainers,
I reviewed "API key scope catalog: derive from routes and expose for key-creation UX" and would like to work on this.
I have reviewed the problem description and acceptance criteria for this issue. I have a clear, tested implementation ready with defensive error handling and 100% green CI proof.
I will deliver a clean, well-tested, and production-ready PR promptly upon assignment. Kindly assign this issue to me.
Thank you!
bitech026 commentedon Oct 19, 2026
@bitech026 has applied to work on this issue as part of the Stellar Wave Program's 10th wave.
ℹ️ Repo Maintainers: To accept this application, review their application or assign @bitech026 to this issue.
Dev-Dare4 commentedon Oct 19, 2026
@Dev-Dare4 has applied to work on this issue as part of the Stellar Wave Program's 10th wave.
ℹ️ Repo Maintainers: To accept this application, review their application or assign @Dev-Dare4 to this issue.
johnsmccain commentedon Oct 19, 2026
@johnsmccain has applied to work on this issue as part of the Stellar Wave Program's 10th wave.
ℹ️ Repo Maintainers: To accept this application, review their application or assign @johnsmccain to this issue.
Wittig18 commentedon Oct 19, 2026
@Wittig18 has applied to work on this issue as part of the Stellar Wave Program's 10th wave.
ℹ️ Repo Maintainers: To accept this application, review their application or assign @Wittig18 to this issue.
drips-wave commentedon Oct 19, 2026
Congratulations, @johnsmccain! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on October 22, 2026.
🧑💻 @johnsmccain: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.
Warning
When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.
🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.
🌊 Happy Wave 🌊
grantfox-oss commentedon Oct 19, 2026
🎉 This issue has been marked as completed on GrantFox!
@johnsmccain's PR #628 was approved and merged by @robertocarlous.
🏆 @johnsmccain: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (879 total points). Track your full progress on GrantFox.
👏 Great work, @johnsmccain! Keep contributing to Neurowealth.
Merge pull request #628 from johnsmccain/feat/scope-catalog-api
drips-wave commentedon Oct 19, 2026
This issue has been completed by @johnsmccain as part of the Stellar Wave Program's 10th Wave 🥳
😎 @johnsmccain: You earned 200 Points for completing this issue! Once the Wave's rewards are finalized, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.
🧑💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.
feat(scopes): publish a machine-readable scope catalogue (Neurowealth…