The REST API, API clients, and webhooks — Who can do what

• Only workspace Admins can create or revoke API clients and create or manage webhooks — both live on the Admin-only Developers page. • An API client is scoped to exactly one workspace and carries admin-grade access within it; it never reaches another workspace's data. • Each endpoint checks the token's scope — read for GETs, write for record changes, schema for tables, fields, and webhooks — and a missing scope returns 403. • The reference at /Developers/Docs is readable by any signed-in user, but every live call it makes still needs a valid token with the right scope.