Google OAuth scopes used by Fantastical and Cardhop
Fantastical and Cardhop use the following OAuth scopes when connecting a Google account. See our privacy policy for more information about how our apps use and store personal data.
Fantastical
https://www.googleapis.com/auth/userinfo.email
A default scope needed to sign in to Google.
https://www.googleapis.com/auth/userinfo.profile
A default scope needed to sign in to Google.
https://www.googleapis.com/auth/calendar
Allows access Google Calendar through the CalDAV and Google Calendar APIs.
https://www.googleapis.com/auth/tasks
Allows access Google Tasks through the Google Tasks API.
https://www.googleapis.com/auth/drive.file
Allows uploading files to Google Drive. This is single file access, so Fantastical is only able to see and modify files that it has uploaded. Fantastical doesn't have access to anything else on Google Drive. This scope is used when adding attachments to events on Google Calendar.
https://www.googleapis.com/auth/contacts.readonly
Allows read-only access to Google Contacts. This scope is used only when adding invitees so you can autosuggest invitees based on contacts. Contact data is used locally and not sent off the device.
https://www.googleapis.com/auth/contacts.other.readonly
Allows read-only access to the other contacts section of Google Contacts. This scope is used only when adding invitees so you can autosuggest invitees based on contacts. Contact data is used locally and not sent off the device.
https://www.googleapis.com/auth/admin.directory.user.readonly
Allows read-only access to the Google Workspace user directory. This scope is used to autosuggest invitees based on who is in the Google Workspace organization. Directory data is used locally and not sent off the device.
https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly
Allows read-only access to the Google Workspace calendar resource directory. This scope to search for conference rooms and resources in the Google Workspace organization to reserve them for meetings. Directory data is used locally and not sent off the device.
Cardhop
https://www.googleapis.com/auth/contacts.readonly
Allows read-only access to Google Contacts. This scope is used only when searching for contacts in the Google directory. Contact data is used locally and not sent off the device.
https://www.googleapis.com/auth/contacts.other.readonly
Allows read-only access to the other contacts section of Google Contacts. This scope is used only when searching for contacts in the Google directory. Contact data is used locally and not sent off the device.
https://www.googleapis.com/auth/admin.directory.user.readonly
Allows read-only access to the Google Workspace user directory. This scope is used only when searching for contacts in the Google directory. Directory data is used locally and not sent off the device.
Add Fantastical and Cardhop as trusted apps to a Google Workspace organization
Some Google Workspace organizations restrict access to third-party apps. If you see an error adding your Google Workspace account to Fantastical or Cardhop then you may need to ask your admin to add Fantastical and Cardhop to the list of trusted apps.
- Open the Google Workspace admin panel and select Security > API controls
- Select Manage Third-Party App Access
- Select Configure new app > OAuth App Name or Client ID
Enter the following client IDs for Fantastical and Cardhop and add them to the list of allowed apps:
Fantastical for Mac: 280246159890-6p3c2652mgdta3e721r877iqsip4skm1.apps.googleusercontent.com
Fantastical for iOS: 76055741943-dvgi2aep3v6vdh97vu0ih0jqk9fj13i4.apps.googleusercontent.com
Cardhop for Mac: 615390563111-q996sd7klo3509n959m03qrjo29trp32.apps.googleusercontent.com
Cardhop for iOS: 1079610348788-q18166it5pat91hctlk7ti0qkatu98km.apps.googleusercontent.com
You can also refer to Google's help pages for more info.