Which permissions does Codacy need from my account?

Codacy cloud uses OAuth to handle logins, and we support the following providers to register:

  • GitHub cloud
  • BitBucket cloud
  • Google

Depending on the provider (GitHub, Bitbucket, Google), they may need different permissions due to different OAuth implementations. We strive to request only the appropriated permissions.


GitHub login

If you log in with GitHub, Codacy requires the following permissions/scopes:

  • 'user' permissions to access GitHub user info.
  • 'public_repo' permissions to set PR status on public projects.
  • 'repo' access to access private repositories.
  • 'write: public_key' to add ssh keys to the repositories, so that Codacy can have access to the repository.
  • 'write:repo_hook' access to add post-commit hooks.
  • 'admin:org_hook' to access organization hooks.


Bitbucket login

If you log in with Bitbucket, Codacy requires full access.


Google login

If you log in with Google, Codacy requires the following permissions/scopes

  • Email permission (no more permissions needed since there are no repositories in Google)


Have more questions? Submit a request


Article is closed for comments.