Reference
monday.com
Set up monday.com OAuth for work management and project tracking
Overview
Section titled “Overview”Connect your users to monday.com for work management, project boards, task tracking, and team collaboration.
| Property | Value |
|---|---|
| Provider ID | monday |
| Category | Productivity |
| PKCE | Not supported |
| Token refresh | Not supported (permanent tokens) |
| Redirect URI | Shown in Developer Portal |
Step 1: Create a monday.com OAuth App
Section titled “Step 1: Create a monday.com OAuth App”Go to the monday.com Developer Center
Open the monday.com Developer Center by clicking the profile picture in the top-right of monday.com and selecting Developers.
Create a new app
Click Create app and enter the app name.
Configure OAuth
Under OAuth, add the Alter callback URL from the Developer Portal to the Redirect URLs field.
Get credentials
Copy the Client ID and Client Secret from the OAuth settings.
Step 2: Add to Alter Vault
Section titled “Step 2: Add to Alter Vault”Open the Developer Portal
Go to portal.alterauth.com and navigate to the application.
Add monday.com provider
Go to OAuth Providers > Add Provider > monday.com.
Enter credentials
- Client ID: Paste your monday.com Client ID
- Client Secret: Paste your monday.com Client Secret
Select scopes
Choose the scopes the application needs.
Save
Click Save. The provider is now active.
Available Scopes
Section titled “Available Scopes”| Scope | Description |
|---|---|
me:read | Read your user information |
boards:read | Read board data |
boards:write | Create and update board data |
workspaces:read | Read workspace data |
updates:read | Read update posts |
updates:write | Create and modify update posts |
Additional scopes
Section titled “Additional scopes”| Scope | Description |
|---|---|
account:read | Read account-level information |
ai:consume | Use monday AI features and consume AI credits |
apps:read | Read installed app and app-feature data |
apps:write | Manage installed apps and app features |
assets:read | Read files and assets stored on boards |
departments:read | Read department information |
departments:write | Create and modify departments |
docs:read | Read monday docs |
docs:write | Create and modify monday docs |
items:read | Read items and their column values |
items:write | Create and modify items and their column values |
notifications:write | Send notifications to users |
tags:read | Read tags |
teams:read | Read team information and membership |
teams:write | Create and modify teams and their membership |
users:read | Read user information |
users:write | Create and modify users |
webhooks:read | Read configured webhooks |
webhooks:write | Create and delete webhooks |
workspaces:write | Create and modify workspaces |
- monday.com tokens do not expire. There is no refresh token flow.
- See the monday.com OAuth documentation for more details.
Policy-cataloged operations
Section titled “Policy-cataloged operations”Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.
| Operation ID | Families | Method | Provider path |
|---|---|---|---|
mutation/delete_item | admin, delete, read, send, write | POST | /v2 |