Contentful

Overview

Connect your users to Contentful for headless CMS content management, content delivery, and space administration.

Property	Value
Provider ID	contentful
Category	Developer Tools
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Contentful OAuth App

Go to Contentful OAuth Applications

Navigate to Contentful account settings and go to OAuth applications.

Create a new application

Click New Application.

Configure the application

Enter the application name and description.

Add the redirect URI

Add the Redirect URI from the Developer Portal to the Redirect URI field.

Get credentials

Copy the Client ID and Client Secret.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Contentful provider

Go to OAuth Providers > Add Provider > Contentful.

Enter credentials

• Client ID: Paste your Contentful Client ID
• Client Secret: Paste your Contentful Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
content_management_manage	Full access to the Content Management API
content_management_read	Read-only access to the Content Management API

Notes

• The content_management_manage scope is included by default and provides full read/write access.
• Use content_management_read if the application only needs to read content.
• See the Contentful authentication documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
cma/assets/publish	send	PUT	/spaces/{space_id}/environments/{environment_id}/assets/{asset_id}/published
cma/entries/publish	send	PUT	/spaces/{space_id}/environments/{environment_id}/entries/{entry_id}/published
cma/entries/delete	delete	DELETE	/spaces/{space_id}/environments/{environment_id}/entries/{entry_id}
cma/entries/unpublish	delete	DELETE	/spaces/{space_id}/environments/{environment_id}/entries/{entry_id}/published
cma/assets/create	write	POST	/spaces/{space_id}/environments/{environment_id}/assets
cma/assets/process	write	PUT	/spaces/{space_id}/environments/{environment_id}/assets/{asset_id}/files/{locale}/process
cma/entries/create	write	POST	/spaces/{space_id}/environments/{environment_id}/entries
cma/entries/update	write	PUT	/spaces/{space_id}/environments/{environment_id}/entries/{entry_id}
cda/assets/get	read	GET	/spaces/{space_id}/environments/{environment_id}/assets/{asset_id}
cda/assets/list	read	GET	/spaces/{space_id}/environments/{environment_id}/assets
cda/content-types/list	read	GET	/spaces/{space_id}/environments/{environment_id}/content_types
cda/entries/get	read	GET	/spaces/{space_id}/environments/{environment_id}/entries/{entry_id}
cda/entries/list	read	GET	/spaces/{space_id}/environments/{environment_id}/entries
cda/locales/list	read	GET	/spaces/{space_id}/environments/{environment_id}/locales
cda/sync	read	GET	/spaces/{space_id}/environments/{environment_id}/sync
cma/spaces/get	read	GET	/spaces/{space_id}
cma/users/me	read	GET	/users/me