DigitalOcean

Overview

Connect your users to DigitalOcean for cloud infrastructure management, droplet control, and resource provisioning.

Property	Value
Provider ID	digitalocean
Category	Cloud
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a DigitalOcean OAuth App

Go to the DigitalOcean API Applications page

Navigate to cloud.digitalocean.com/account/api/applications and sign in.

Create a new application

Click Create Application and enter the application name and description.

Configure the redirect URI

Add the Alter callback URL (from the Developer Portal) to the Callback URL field.

Get credentials

Copy the Client ID and Client Secret.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add DigitalOcean provider

Go to OAuth Providers > Add Provider > DigitalOcean.

Enter credentials

• Client ID: Paste your DigitalOcean Client ID
• Client Secret: Paste your DigitalOcean Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
read	Read-only access to account and resources
read_write	Full read and write access to account and resources

Notes

• DigitalOcean uses read and read write (space-separated) internally. Alter Vault normalizes read_write to the correct format automatically.
• See the DigitalOcean OAuth API documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
account_get	read	GET	/v2/account
balance_get	read	GET	/v2/customers/my/balance
billingHistory_list	read	GET	/v2/customers/my/billing_history
droplets_list	read	GET	/v2/droplets
droplets_get	read	GET	/v2/droplets/{droplet_id}
droplets_create	write	POST	/v2/droplets
droplets_destroy	delete	DELETE	/v2/droplets/{droplet_id}
droplets_destroy_byTag	delete	DELETE	/v2/droplets
dropletActions_post	write	POST	/v2/droplets/{droplet_id}/actions
dropletActions_list	read	GET	/v2/droplets/{droplet_id}/actions
sshKeys_list	read	GET	/v2/account/keys
sshKeys_create	admin	POST	/v2/account/keys
sshKeys_delete	admin, delete	DELETE	/v2/account/keys/{ssh_key_identifier}
domains_list	read	GET	/v2/domains
domains_get	read	GET	/v2/domains/{domain_name}
domains_create	write	POST	/v2/domains
domains_delete	delete	DELETE	/v2/domains/{domain_name}
domains_list_records	read	GET	/v2/domains/{domain_name}/records
domains_create_record	write	POST	/v2/domains/{domain_name}/records
domains_update_record	write	PUT	/v2/domains/{domain_name}/records/{domain_record_id}
domains_delete_record	delete	DELETE	/v2/domains/{domain_name}/records/{domain_record_id}
firewalls_list	read	GET	/v2/firewalls
firewalls_get	read	GET	/v2/firewalls/{firewall_id}
firewalls_create	admin	POST	/v2/firewalls
firewalls_update	admin	PUT	/v2/firewalls/{firewall_id}
firewalls_delete	admin, delete	DELETE	/v2/firewalls/{firewall_id}
firewalls_add_rules	admin	POST	/v2/firewalls/{firewall_id}/rules
firewalls_delete_rules	admin	DELETE	/v2/firewalls/{firewall_id}/rules
volumes_list	read	GET	/v2/volumes
volumes_create	write	POST	/v2/volumes
volumes_delete	delete	DELETE	/v2/volumes/{volume_id}
snapshots_list	read	GET	/v2/snapshots
snapshots_delete	delete	DELETE	/v2/snapshots/{snapshot_id}
images_delete	delete	DELETE	/v2/images/{image_id}
kubernetes_list_clusters	read	GET	/v2/kubernetes/clusters
kubernetes_create_cluster	write	POST	/v2/kubernetes/clusters
kubernetes_delete_cluster	delete	DELETE	/v2/kubernetes/clusters/{cluster_id}
databases_list_clusters	read	GET	/v2/databases
databases_create_cluster	write	POST	/v2/databases
databases_destroy_cluster	delete	DELETE	/v2/databases/{database_cluster_uuid}