Airtable

Overview

Connect your users to Airtable for database and spreadsheet management, record access, and schema operations.

Property	Value
Provider ID	airtable
Category	Productivity
PKCE	Required
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create an Airtable OAuth Integration

Go to the Airtable Developer Hub

Navigate to airtable.com/create/oauth and sign in.

Create a new OAuth integration

Enter your integration name and description.

Add the redirect URL

Add the Redirect URI from the Developer Portal to the Redirect URLs field.

Select scopes

Select the scopes the application needs (e.g., data.records:read, schema.bases:read).

Get credentials

Copy the Client ID and generate a Client Secret.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Airtable provider

Go to OAuth Providers > Add Provider > Airtable.

Enter credentials

• Client ID: Paste your Airtable Client ID
• Client Secret: Paste your Airtable Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
data.records:read	Read records in bases
data.records:write	Create, update, and delete records
data.recordComments:read	Read comments on records in bases
data.recordComments:write	Create, update, and delete comments on records
schema.bases:read	Read base schema
schema.bases:write	Create and modify base schema
webhook:manage	Create and manage webhooks
workspacesAndBases:read	Read the list of accessible workspaces, bases, and their metadata
user.email:read	See the user’s email address (populates the connected account’s display email via /v0/meta/whoami)

Notes

• Airtable requires PKCE for all OAuth flows. Alter Vault handles this automatically.
• Scopes are colon-separated (e.g., data.records:read).
• See the Airtable OAuth documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
comments/create	send	POST	/v0/{baseId}/{tableIdOrName}/{recordId}/comments
records/delete	delete	DELETE	/v0/{baseId}/{tableIdOrName}/{recordId}
records/delete-multiple	delete	DELETE	/v0/{baseId}/{tableIdOrName}
webhooks/create	admin, write	POST	/v0/bases/{baseId}/webhooks
attachments/upload	write	POST	/v0/{baseId}/{recordId}/{attachmentFieldIdOrName}/uploadAttachment
meta/bases/create	write	POST	/v0/meta/bases
meta/fields/create	write	POST	/v0/meta/bases/{baseId}/tables/{tableId}/fields
meta/fields/update	write	PATCH	/v0/meta/bases/{baseId}/tables/{tableId}/fields/{columnId}
meta/tables/create	write	POST	/v0/meta/bases/{baseId}/tables
meta/tables/update	write	PATCH	/v0/meta/bases/{baseId}/tables/{tableIdOrName}
records/create	write	POST	/v0/{baseId}/{tableIdOrName}
records/replace	write	PUT	/v0/{baseId}/{tableIdOrName}/{recordId}
records/update	write	PATCH	/v0/{baseId}/{tableIdOrName}/{recordId}
records/update-multiple	write	PATCH	/v0/{baseId}/{tableIdOrName}
comments/list	read	GET	/v0/{baseId}/{tableIdOrName}/{recordId}/comments
meta/base-schema	read	GET	/v0/meta/bases/{baseId}/tables
meta/bases/list	read	GET	/v0/meta/bases
meta/whoami	read	GET	/v0/meta/whoami
records/get	read	GET	/v0/{baseId}/{tableIdOrName}/{recordId}
records/list	read	GET	/v0/{baseId}/{tableIdOrName}
webhooks/list	read	GET	/v0/bases/{baseId}/webhooks
webhooks/payloads	read	GET	/v0/bases/{baseId}/webhooks/{webhookId}/payloads