EVE SSO consent

EVE Permissions Center

WarpIntel asks for EVE permissions only when a feature needs them. Public tools work without login, and first sign-in should stay limited to public identity until private modules are enabled.

First Login

publicData

Used to confirm the EVE character and attach saved reports to that account. It does not read wallet, assets, skills, location, private mail, or corporation data.

EVE sign-in is feature-flagged off until the production callback is confirmed and a test sign-in succeeds.Preview ConsentJSON Preview

Consent Rules

  • Public tools stay usable without EVE SSO.
  • Private scopes are requested feature-by-feature, not all at first login.
  • Raw pasted tool inputs are not stored in account-saved reports.
  • Write/action scopes stay off until a reviewed feature needs them.
  • Users can sign out from the dashboard and revoke access through CCP account tools.

EVE SSO Launch Readiness

Gated
Runtime scopes57
Planned scopes63
Ready groups9
High-trust scopes2
Write/action scopes2
Unknown scopes0

Production callback to enter in the EVE Developer Portal:https://warpintel.app/api/auth/eve/callback

EVE Sign-In Feature Flag

Public sign-in is hidden until the production callback is confirmed.

off
Client Credentials

Client ID and secret are present in the runtime without exposing their values.

ready
Production Callback

The runtime callback matches the public WarpIntel callback URL.

ready
First Login Scope

publicData is allowed for the first sign-in and account shell.

ready
Feature Scope Coverage

9 of 10 permission groups are fully allowed in the runtime scope list.

partial
IdentityAllowed
Public Identity

1/1 scope(s) allowed

ContactsAllowed
Contacts And Standings

5/5 scope(s) allowed

SkillsAllowed
Skills And Fit Readiness

5/5 scope(s) allowed

AuditAllowed
Character Audit Profile

9/9 scope(s) allowed

MarketAllowed
Personal Market And Industry

8/8 scope(s) allowed

PIAllowed
Planetary Industry Colonies

1/1 scope(s) allowed

Fleet/SRPAllowed
Fleet And SRP Context

5/5 scope(s) allowed

Corp OpsAllowed
Corporation Operations

15/15 scope(s) allowed

Corp GovAllowed
Corporation Governance

6/6 scope(s) allowed

ActionsPartial
Optional Write Or Client Actions

2/8 scope(s) allowed; 6 still gated

Feature Consent Map

Each feature keeps its own consent moment. Preview links show the exact scope bundle before any CCP redirect.

/fit-labLocal
Fit Lab Skill Readiness

Ask only when a signed-in pilot requests live skill, clone, implant, or fitting comparison.

Manual fitting review works now without EVE SSO.
Skills
5 scope(s)
PreviewJSON
/character-auditLocal
Character Audit

Ask when a user chooses authenticated audit evidence instead of pasted browser-local notes.

Local audit scoring and scope-gap summaries are available before private sync.
AuditMarketFleet/SRP
22 scope(s)
PreviewJSON
/marketLocal
Market, Industry, And Assets

Ask when a signed-in pilot wants private asset, order, wallet, contract, or job views.

Public market and appraisal tools work without account data.
Market
8 scope(s)
PreviewJSON
/piPublic
PI Colony Planning

Ask only when a user wants authorized colony review rather than public template planning.

PI templates and planning helpers are public-data ready.
PI
1 scope(s)
PreviewJSON
/srpFuture
Fleet And SRP Proof Context

Ask when a signed-in pilot opens SRP proof, fleet participation, or private killmail review.

Manual SRP intake is live and guarded without private EVE data.
Fleet/SRP
5 scope(s)
PreviewJSON
/corp-auditFuture
Corporation Command Center

Ask after role review confirms the character can authorize corporation-level data.

Manual corp audit and corp stats tools work from pasted or public information.
Corp OpsCorp Gov
21 scope(s)
PreviewJSON
/fleetsHigh trust
Optional Fleet And Client Actions

Ask only inside a human-triggered action flow with a confirmation step.

Fleet pages are advisory-first; write/client actions remain disabled for launch.
Fleet/SRPActions
13 scope(s); 8 high-trust; 8 write/action
PreviewJSON
IdentityReady

Public Identity

Confirms the pilot signing in and lets WarpIntel attach saved reports to that EVE character.

Pilot dashboardsaved private reportsmembership snapshot
1 scope(s)
  • publicData
First login should start here. It does not grant wallet, asset, skill, location, or corporation data.Preview ConsentJSON Preview
ContactsLater

Contacts And Standings

Supports future contact, standing, watchlist, recruiting, diplomacy, and alert reviews after explicit opt-in.

watchlist contextdiplomacy reviewrecruiting checkscontact-aware alerts
5 scope(s)
  • esi-alliances.read_contacts.v1
  • esi-characters.read_contacts.v1
  • esi-characters.read_standings.v1
  • esi-corporations.read_contacts.v1
  • esi-corporations.read_standings.v1
Read-only, but socially sensitive. Request only for contact, standing, access, or alert features that clearly need it.Preview ConsentJSON Preview
SkillsLater

Skills And Fit Readiness

Lets Fit Lab and the Skill Planner compare doctrines against live skills, queue, clones, and implants.

authenticated skill plannerfit skill-gap reviewclone and implant readiness
5 scope(s)
  • esi-skills.read_skills.v1
  • esi-skills.read_skillqueue.v1
  • esi-clones.read_clones.v1
  • esi-clones.read_implants.v1
  • esi-fittings.read_fittings.v1
Read-only. Request only when a pilot opens authenticated readiness checks.Preview ConsentJSON Preview
AuditLater

Character Audit Profile

Adds private character activity, calendar, research, blueprint, title, medals, notification, FW, loyalty, and fatigue context for audit-style reviews.

character auditactivity reviewcalendar/timer contextresearch and loyalty summaries
9 scope(s)
  • esi-calendar.read_calendar_events.v1
  • esi-characters.read_agents_research.v1
  • esi-characters.read_blueprints.v1
  • esi-characters.read_fatigue.v1
  • esi-characters.read_fw_stats.v1
  • esi-characters.read_loyalty.v1
  • esi-characters.read_medals.v1
  • esi-characters.read_notifications.v1
  • esi-characters.read_titles.v1
Read-only private profile data. Keep it out of first login and request it only from the audit or command-center workflow.Preview ConsentJSON Preview
MarketLater

Personal Market And Industry

Supports private order, wallet, contract, asset, industry, and mining views for the signed-in pilot.

private asset findermarket order dashboardindustry jobsmining history
8 scope(s)
  • esi-assets.read_assets.v1
  • esi-wallet.read_character_wallet.v1
  • esi-contracts.read_character_contracts.v1
  • esi-markets.read_character_orders.v1
  • esi-markets.structure_markets.v1
  • esi-search.search_structures.v1
  • esi-industry.read_character_jobs.v1
  • esi-industry.read_character_mining.v1
Read-only, but financially sensitive. Keep it feature-specific and clearly explain why each feature needs it.Preview ConsentJSON Preview
PILater

Planetary Industry Colonies

Lets PI tools forecast colony layouts, production risk, and storage pressure after explicit opt-in.

PI colony forecastinglayout reviewproduction-stop alerts
1 scope(s)
  • esi-planets.manage_planets.v1
Despite the word manage, current planned use is read-style colony review. Keep UI wording conservative.Preview ConsentJSON Preview
Fleet/SRPLater

Fleet And SRP Context

Adds proof context for fleets, losses, location, ship type, online state, and private killmail review.

SRP proof reviewfleet participation contextprivate live intel
5 scope(s)
  • esi-killmails.read_killmails.v1
  • esi-fleets.read_fleet.v1
  • esi-location.read_location.v1
  • esi-location.read_online.v1
  • esi-location.read_ship_type.v1
Location and online state are privacy-sensitive. Request only at the feature moment and never for first login.Preview ConsentJSON Preview
Corp OpsLater

Corporation Operations

Enables authorized corporation dashboards for membership, structures, wallets, contracts, markets, jobs, mining, and killmails.

corp command centerpermission auditfinance and SRP reservestructure and industry reports
15 scope(s)
  • esi-corporations.read_corporation_membership.v1
  • esi-characters.read_corporation_roles.v1
  • esi-assets.read_corporation_assets.v1
  • esi-corporations.read_blueprints.v1
  • esi-corporations.read_structures.v1
  • esi-corporations.read_starbases.v1
  • esi-corporations.track_members.v1
  • esi-wallet.read_corporation_wallets.v1
  • esi-contracts.read_corporation_contracts.v1
  • esi-markets.read_corporation_orders.v1
  • esi-industry.read_corporation_jobs.v1
  • esi-industry.read_corporation_mining.v1
  • esi-killmails.read_corporation_killmails.v1
  • esi-planets.read_customs_offices.v1
  • esi-universe.read_structures.v1
High-trust read-only data. Require authorized corporation roles and visible audit history before showing it.Preview ConsentJSON Preview
Corp GovLater

Corporation Governance

Supports corporation governance, hangar accountability, divisions, facilities, member titles, medals, FW context, and operational audit logs.

corp governancefacility reviewdivision auditmember title and medal context
6 scope(s)
  • esi-corporations.read_container_logs.v1
  • esi-corporations.read_divisions.v1
  • esi-corporations.read_facilities.v1
  • esi-corporations.read_fw_stats.v1
  • esi-corporations.read_medals.v1
  • esi-corporations.read_titles.v1
High-trust corporation read data. Require officer/director authorization, audit history, and a visible reason before use.Preview ConsentJSON Preview
ActionsHigh Trust

Optional Write Or Client Actions

Covers future user-triggered actions like saving fittings, fleet controls, contacts, calendar responses, or client handoff.

save fitting to EVEfleet admin controlscontact synccalendar RSVPoptional client handoff
8 scope(s)
  • esi-fittings.write_fittings.v1
  • esi-fleets.write_fleet.v1
  • esi-characters.write_contacts.v1
  • esi-calendar.respond_calendar_events.v1
  • esi-mail.send_mail.v1
  • esi-mail.organize_mail.v1
  • esi-ui.open_window.v1
  • esi-ui.write_waypoint.v1
Not for launch. Every action needs a human click, role check, confirmation step, and separate review before use.Preview ConsentJSON Preview

High Trust Boundary

The developer application may have a broad allowed-scope set for the mega-app roadmap, but the app should request only the scopes needed for the feature a user is turning on. Location, online state, wallet, corporation finance, and write/action scopes require extra care, visible explanations, and human confirmation. Scope requests can be checked through the safe consent preview before a user is redirected to CCP.

First ConsentFirst Login Consent Preview

Shows the minimal public identity scope WarpIntel should use for first sign-in.

This preview does not start OAuth, contact CCP, or expose private EVE account data.
High-Trust ConsentFleet Write High-Trust Preview

Shows how WarpIntel explains a future write/action fleet scope before any CCP redirect.

Write/action scopes stay feature-specific, user-triggered, confirmation-gated, and human-reviewed.
Preview First ConsentFirst Consent JSONPreview High-Trust ConsentHigh-Trust JSON PreviewScope Catalog JSONEVE Readiness JSONData Rights