---
title: "Get Allowed Scopes (v2)"
method: GET
path: "/api/v2/agent-portfolios/user-tokens/scopes"
tags: ["Agent Portfolios"]
---

# Get Allowed Scopes (v2)

`GET /api/v2/agent-portfolios/user-tokens/scopes`

## Request

- Base URL: `https://public-api.etoro.com`
- URL: `https://public-api.etoro.com/api/v2/agent-portfolios/user-tokens/scopes`
- Auth: one of:
  - OAuth 2
    - Authorization code
    - Scopes: `etoro-public:agent-portfolio:read`
  - OAuth 2
    - Authorization code
    - Scopes: `etoro-public:agent-portfolio:write`
- TypeScript: <https://skmtc.dev/etoro/apis/etoro-api/docs/api/v2/agent-portfolios/user-tokens/scopes/get.ts> (a function with typed inputs; its response is checked against the schema)

**Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget.

---

Returns the permission scope names that may be assigned to agent-portfolio user tokens.

## Headers

- `x-request-id` string, uuid, required
- `x-api-key` string, password, required
- `x-user-key` string, password, required

## Response `200`

Allowed scopes retrieved successfully

- AgentPortfolioApiGetAllowedScopesResponse
  - `scopes` ScopeNameItem[]: The permission scope names that may be assigned to agent-portfolio user tokens.
    - `name` string: The permission scope name.

## Other responses

- `401`: Unauthorized
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/etoro/apis/etoro-api.md) - [All operations](https://skmtc.dev/etoro/apis/etoro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/etoro/apis/etoro-api/revisions/69c1fb266c35?raw)