Permissions Reference
Every permission an assistant or API key can hold, what it unlocks, and which ones can change records — generated from the server.
Every capability on the API and the MCP server is gated by a permission (a "scope"). You tick permissions on the consent screen when connecting an assistant, or when creating an API key. A permission marked "writes" can change records; leave those unticked for a strictly read-only connection.
Not every permission fits every kind of account — a tenant cannot be granted owner statements, a contractor cannot be granted the power to publish a landlord's listing. The consent screen and the key editor only offer what your account type can hold, and the server refuses the rest even if asked directly.
Account
| Permission | Name | Writes | What it allows |
|---|
| account:read | Account profile | no | Read the connected account's name, role and plan. |
| team:read | Team | no | Read staff, technicians and their property assignments, and how far from the job site a shift was clocked in. |
| offers:read | Rewards & referrals | no | Read the account's referral link, earned rewards and Seayora credit balance. |
| billing:read | Subscription | no | Read the Seayora plan, invoices and billing status. |
Leasing
| Permission | Name | Writes | What it allows |
|---|
| listings:read | Rental marketplace | no | Search apartments listed on Seayora, anywhere — not just yours. |
| listings:write | Publish listings | yes | Post a new rental listing publicly on Seayora on this account's behalf. |
| applications:read | Applications | no | Read rental applications and screening status. |
| applications:write | Decide applications | yes | Pre-approve, accept or reject rental applications. |
| marketing:read | Listing performance | no | Read listing views, marketing reach and which partner feeds a listing is syndicated to. |
| showings:read | Tours & showings | no | Read tour availability and booked showings. |
| showings:write | Book & manage tours | yes | Book a tour on a listing, cancel one, or record how a showing went. |
| renewals:read | Renewals & notices | no | Read expiring leases, renewal offers, and the notices served on a tenancy. |
| evictions:read | Eviction cases | no | Read eviction cases on this account — what stage each is at, the steps the state and city require, and the record. Read-only: nothing on this surface can start, advance or file one. |
Portfolio
| Permission | Name | Writes | What it allows |
|---|
| properties:read | Properties | no | Read units, addresses, rent and amenities. |
| properties:write | Edit properties | yes | Change rent, availability, description and policies. |
| tenants:read | Tenants | no | Read tenant names and contact details. |
| leases:read | Leases | no | Read lease terms, status and signatures. |
Money
| Permission | Name | Writes | What it allows |
|---|
| payments:read | Rent payments | no | Read the rent roll, arrears and payment history. |
| payments:write | Ask to spread a rent charge | yes | Ask this account’s landlord for a payment plan on rent it cannot pay in full. It only ASKS — it can never approve, sign or pay anything. |
| accounting:read | Accounting | no | Read invoices, bills, expenses, vendors and the chart of accounts. |
| owners:read | Owner statements | no | Read owners, distributions and the owner ledger. |
| deposits:read | Security deposits | no | Read deposits held, deductions, return deadlines and the statute behind them. |
| analytics:read | Portfolio analytics | no | Read occupancy, rent roll, arrears, delinquency reports and building health scores. |
Operations
| Permission | Name | Writes | What it allows |
|---|
| maintenance:read | Work orders | no | Read maintenance jobs and their status. |
| maintenance:write | Manage work orders | yes | Open, reschedule, reassign and close maintenance jobs. |
| tasks:read | Tasks | no | Read property-management tasks. |
| tasks:write | Manage tasks | yes | Create, update and complete tasks. |
| calendar:read | Calendar | no | Read scheduled showings, inspections and meetings. |
| calendar:write | Schedule events | yes | Create calendar events and showings. |
| inspections:read | Inspections | no | Read move-in, move-out and periodic inspection reports and their findings. |
| compliance:read | Compliance | no | Read Local Law 97 carbon caps, city violations and enforcement, and housing-program filings and deadlines. |
| safety:read | Your insurance, licences & safety record | no | For a contracting business: which certificates it is required to hold and whether they are in date, and which vendors it owes a 1099. |
| iot:read | Connected devices | no | Read meters, sensors and thermostats — live values, usage history and the alerts they raised. |
Communication
| Permission | Name | Writes | What it allows |
|---|
| messages:read | Messages | no | Read message threads with tenants, owners and pros. |
| messages:write | Send messages | yes | Send messages on the account's behalf. |
| community:read | Resident community | no | Read building announcements, package deliveries and amenity bookings. |
| community:write | Post to the building | yes | Post an announcement to every resident, or log a delivered package. Operator-side. |
| amenities:write | Book an amenity | yes | Reserve a shared space — roof deck, laundry, party room — as a resident. |
Documents
| Permission | Name | Writes | What it allows |
|---|
| documents:read | Documents | no | Read document metadata — titles, types and tax years. |
How permissions are enforced
- On the server, on every single call — not in the assistant. A tool the credential does not hold the permission for is not merely hidden; calling it directly is refused.
- A connection can only ever narrow what it was granted. Refreshing its credential cannot widen it.
- The ceiling is your account type. Approving a proposal re-checks it against your own permissions, so an assistant can never do through you what you could not do yourself.
Related guides
Related features and guides
- Connecting an AI Assistant to Seayora — Documentation. What it means to connect Claude, ChatGPT or your own software to your Seayora account, what an assistant can and cannot do, and the one URL you need.
- API Authentication & API Keys — Documentation. The three credentials Seayora accepts, live versus test keys, what a credential can see, and how to keep keys safe.
- MCP Server Reference — Documentation. Transport, protocol versions, and the full generated catalogue of tools, resources and prompts the Seayora MCP server offers.
- Audit Logs — Feature. Audit logging across consequential actions, so account activity, permission changes, and financial entries all leave a reviewable trail.
Explore Seayora