# What scopes exactly does the Wordpress API key need?

**URL:** <https://meta.discourse.org/t/what-scopes-exactly-does-the-wordpress-api-key-need/175812>\
**Category:** WordPress\
**Created:** [January 11, 2021, 8:57pm UTC](https://meta.discourse.org/t/what-scopes-exactly-does-the-wordpress-api-key-need/175812 "2021-01-11T20:57:39Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![mattdm](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mattdm/32/216484_2.png) [@mattdm](https://meta.discourse.org/u/mattdm)\
**Post date:** [December 11, 2021, 5:47pm UTC](https://meta.discourse.org/t/what-scopes-exactly-does-the-wordpress-api-key-need/175812/6 "2021-12-11T17:47:54Z")

</div>

@angus Did this go anywhere? We’d like to use this on one of our wordpress sites where we have a less-than-tightly-controlled set of users with admin access, and I don’t want that to be an escalation into full admin access on our Discourse site.

---

_[View the full topic](https://meta.discourse.org/t/what-scopes-exactly-does-the-wordpress-api-key-need/175812)._