> You are reading the Docusign Developer Documentation. For clean Markdown of any page, append .md to the page URL.
>
> Documentation indexes by section:
> - APIs and SDKs: https://docusign.docs.buildwithfern.com/docs/llms.txt
> - Platform 101: https://docusign.docs.buildwithfern.com/platform/llms.txt
> - Extension Apps: https://docusign.docs.buildwithfern.com/extension-apps/llms.txt
> - Docusign CLI: https://docusign.docs.buildwithfern.com/docusign-cli/llms.txt
>
> Authentication (OAuth, JWT Grant, M2M): https://docusign.docs.buildwithfern.com/platform/auth
> Webhooks and Connect: https://docusign.docs.buildwithfern.com/platform/webhooks
>
> OpenAPI specifications: https://docusign.docs.buildwithfern.com/openapi.json
> MCP server: https://docusign.docs.buildwithfern.com/_mcp/server

# Authentication

> Learn how to authenticate to call Workspaces API endpoints.

All calls to the Docusign Workspaces API are authenticated using an access token that your app obtains using one of the standard OAuth 2.0 grants supported by Docusign:

* [Public Authorization Code Grant](/platform/auth/public-authcode-get-token)
* [Confidential Auth Code Grant](/platform/auth/confidential-authcode-get-token)
* [Implicit Grant](/platform/auth/implicit-get-token)
* [JWT Grant](/platform/auth/jwt-get-token)

**Note:** See [Choose an OAuth type](/platform/auth/choose) for details on when to use each authentication type.

The only difference between authenticating with the Workspaces API and the eSignature API is that, when requesting the access token in your OAuth2 scenario, you must request a special scope in addition to your other Docusign eSignature [Authentication scopes](/platform/auth/reference/scopes).

| Scope                 | Description                                            |
| --------------------- | ------------------------------------------------------ |
| `dtr.company.read`    | Used to read workspace profile information.            |
| `dtr.rooms.read`      | Used to read workspace data.                           |
| `dtr.rooms.write`     | Required for operations to update workspace data.      |
| `dtr.documents.write` | Required for operations to modify workspace documents. |
| `signature`           | Used for operations on the Docusign eSignature API.    |

**Important:** If the required Workspaces API scope was not explicitly requested, calls to the Workspaces API will fail.

## Next steps

Learn how to get an access token with any authentication flow by viewing these guides:

* [Authenticate with Public Authorization Code Grant](/platform/auth/public-authcode-get-token)
* [Authenticate with the Confidential Authorization Code Grant](/platform/auth/confidential-authcode-get-token)
* [Authenticate with the Implicit Grant](/platform/auth/implicit-get-token)
* [Authenticate with the JWT Grant](/platform/auth/jwt-get-token)