---
title: "Get Granted Scopes"
method: GET
path: "/api/{serviceId}/client/granted_scopes/get/{clientId}"
tags: ["Client Management"]
---

# Get Granted Scopes

`GET /api/{serviceId}/client/granted_scopes/get/{clientId}`

Get the set of scopes that a user has granted to a client application.
### Description
Possible values for `requestableScopes` parameter in the response from this API are as follows.
**null**
The user has not granted authorization to the client application in the past, or records about the
combination of the user and the client application have been deleted from Authlete's DB.
**An empty set**
The user has granted authorization to the client application in the past, but no scopes are associated
with the authorization.
**A set with at least one element**
The user has granted authorization to the client application in the past and some scopes are associated
with the authorization. These scopes are returned.
Example: `[ "profile", "email" ]`
The subject parameter is required and must be provided as a query parameter.

## Path parameters

- `serviceId` string, required
- `clientId` string, required

## Query parameters

- `subject` string, required

## Response `200`

Successfully retrieved granted scopes

- ClientAuthorizationDeleteResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.
  - `serviceApiKey` integer — A short message which explains the result of the API call.
  - `clientId` integer — Get the client ID.
  - `subject` string — Get the subject (= unique identifier) of the user who has granted authorization to the client.
  - `latestGrantedScopes` string[] — Get the scopes granted to the client application by the last authorization process by the user (who is identified by the subject).
  - `mergedGrantedScopes` string[] — Get the scopes granted to the client application by all the past authorization processes. Note that revoked scopes are not included.
  - `modifiedAt` integer — Get the timestamp in milliseconds since Unix epoch at which this record was modified.

## Other responses

- `400`
- `401`
- `403`
- `500`

## Changes

- **2026-01-15** `8a534bc68775` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/authlete/apis/authlete-api/changes/api/:serviceId/client/granted_scopes/get/:clientId/get.md)

---

[API](https://skmtc.dev/authlete/apis/authlete-api.md) · [All operations](https://skmtc.dev/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/authlete/authlete-api/revisions/8a534bc68775/schema)