As a developer, I'm interested in finding out more about the CartoDB OAuth API. My sense is that the OAuth API permits the developer to make any SQL call on behalf of the user on any table, but I'm hoping it has a fine-grained (and as yet undocumented) permission system. My use case requires asking users permission to use some tables (but not all) and ideally it would let me get specify the type of access, i.e. read, write or read/write. Can I do that?

2 Answers 2


No, oauth in CartoDB provides full access, there is no possibility of giving access to a single resource.

In any we didn't work so much on oauth, we switched to a simpler auth mechanism (api key) some years ago.

In any case your feedback is really valuable


A bit late, but now CARTO provides an OAuth mechanism including grained permissions. More info here: https://carto.com/developers/fundamentals/oauth-apps/

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.