Scopes

Scopes are granted at API key creation and cannot be changed afterwards. See Authentication for how scopes map to operations.

Scope	Description
`mcp:patient-state`	Query patient state via the MCP Patient State server
`sdk:event-log`	Log health events and upload passive signal Parquet (`send_signals`) via the Olira SDK
`sdk:patient-token`	Mint short-lived, patient-locked JWTs for SDK use
`api:manage-patients`	Create, read, update, and deactivate patient records via REST
`api:org-config`	Read and update organization platform configuration; org schemas; confidence scoring via REST
`sdk:state-read`	Read patient state: stable data, event modules, summaries, logs, events, memories; batch exports
`sdk:historical-ingest`	Upload and manage bulk historical data ingestion jobs
`sdk:integrations`	Manage integrations — catalog, connect/disconnect, data-point subscriptions, sync status (control-plane only, no write-back)
`sdk:integration-write`	Honor the `write_back` flag on logged events for EHR write-back
`api:manage-projects`	Create, list, rename, and deprecate projects; requires an org-wide key

Use olira keys create --scopes … for non-interactive creation, or omit --scopes for the interactive picker.