Scopes
Grant least privilege by workflow.
Atlas scopes map to stable capability families. Re-consent is required when an integration asks for more access. Missing scope fails closed.
Atlas channels
- atlas.channels.read
- atlas.channels.connect
- atlas.channels.rotate
Atlas knowledge
- atlas.knowledge.read
- atlas.knowledge.write
- atlas.knowledge.reprocess
Atlas agents
- atlas.agents.read
- atlas.agents.write
- atlas.agents.deploy
Atlas runtime
- atlas.sessions.read
- atlas.sessions.write
- atlas.conversations.read
- atlas.conversations.reply
- atlas.conversations.assign
- atlas.conversations.mode
- atlas.runs.read
- atlas.runs.decide
- atlas.actions.execute
External agent context
- atlas.context.read
- atlas.events.read
- atlas.events.write