The manifest of your app specifies which APIs it can access and which webhooks it can register to.
When the user installs an application, the scopes are presented to the user for confirmation.

When applications are created for the first time on the Duda Sandbox environment, they will be given all existing scopes in order not to block development. The Duda team will work with you to narrow down scopes to relevant ones before the app goes live.

ScopeAPIsWebhooks
APIs and webhooks which don't require a scopeGet BrandingBRANDING_CHANGED
GET_ACCOUNT_DETAILSGet account info
GET_WEBSITEGet site
Get site backups
PUBLISH
UNPUBLISH
DOMAIN_UPDATED
UPDATE_WEBSITEUpdate site
Upload resources
DOMAIN_UPDATED
PUBLISH_SITEPublish site
Create site backup
Get site backups
Restore site
PUBLISH
UNPUBLISH
DOMAIN_UPDATED
BLOG_POST_PUBLISH
SITE_WIDE_HTMLGet Site-wide widgets
Update Site-wide widgets
GET_PAGESGet pages
Get page
UPDATE_PAGESUpdate page
Delete page
Upload resources
GET_CONTENT_LIBRARYGet Content Library Data
Get Location Data
CONTENT_LIB_PUBLISHED
CONTENT_LIB_CHANGED
UPDATE_CONTENT_LIBRARYUpdate content library data
Publish content library changes
Create additional location
Update Location
Delete location
Upload resources
GET_INJECT_CONTENTGet Inject Content Values
UPDATE_INJECT_CONTENTInject content
Upload resources
GET_COLLECTIONGet Site Collections
Get Collection
UPDATE_COLLECTIONSCreate Collection
Update collection
Delete Collection
Add new rows to collection
Update Collection Rows
Delete Collection Rows
Add new field to collection
Delete collection field
Update Field Name
REPORTINGGet contact form data
Get analytics
CONTACT_FORM_SENT
GET_BACKUPGet site backupsSITE_RESTORED
MANAGE_BACKUPSGet site backups
Restore site
SITE_RESTORED
UPDATE_SSLGenerate SSL Certificate
Delete SSL Certificate
Renew SSL Certificate