tag:read
Last edited on 28 Aug 2025
Scope Summary
View resource tags
Required Scopes
To add a scope to an API token, you must also add its required scopes. For example, to add a non-read scope for a resource type, you must also add the read scope for that resource type.
tag:read has no additional required scopes.
Associated Scopes
Associated scopes are not required, but they support full functionality of the scope they’re associated with.
For example, to create a Droplet, you need droplet:create. To tag a Droplet during creation, you additionally need tag:create, so tag:create is listed as an associated scope for droplet:create.
The following scopes are associated with tag:read:
| Scope | Description | 
|---|---|
| app:read | View App Platform apps | 
| database:read | View Managed Databases | 
| domain:read | View domains and domain records | 
| reserved_ip:read | View Reserved IP addresses | 
| image:read | View images | 
| load_balancer:read | View load balancers | 
| addon:read | View marketplace addon resources | 
| spaces:read | View Spaces object storage buckets | 
| block_storage:read | View Block Storage volumes | 
| block_storage_snapshot:read | View Block Storage volume snapshots | 
| droplet:read | View Droplets | 
| firewall:read | View Cloud firewalls | 
| kubernetes:read | View Kubernetes clusters but not cluster credentials |