Support & Help

Fantastical and Cardhop use OAuth to connect to Microsoft 365. See our privacy FAQ for more information about how our apps use and store personal data.

Fantastical and Cardhop use delegated access

Fantastical and Cardhop connect to Microsoft 365 using delegated access. This means that the apps have the same permissions as the user, and can only access the same data that the user normally has access to.

See Microsoft’s delegated access documentation for more information.

Fantastical

openid, profile, email

Default scopes needed to sign in to Microsoft 365.

EWS.AccessAsUser.All, offline_access

Access to Exchange Web Services to sync mail, calendars and tasks. Fantastical does not download or store mail, but will mark invitations as read or move them to the trash as needed when replying to an event invitation.

Calendars.ReadWrite, Calendars.ReadWrite.Shared, OnlineMeetings.ReadWrite, User.Read, User.ReadBasic.All

Access to read and write events on the user's account and any calendars shared with the user. Also used for Microsoft Teams integration to allow creating a Teams meeting on events.

Tasks.ReadWrite, Tasks.ReadWrite.Shared

Access to read and write tasks on the user's account and any lists shared with the user.

People.Read

Used to search the organization's global address list for matches when adding invitees.

Place.Read.All

Used to load the organization's buildings and rooms for room reservation.

Group.ReadWrite.All

Used to read and write events on group calendars that the user has permission to access.

MailboxSettings.Read

Used to load the user's categories.

Cardhop

openid, profile, email

Default scopes needed to sign in to Microsoft 365.

EWS.AccessAsUser.All, offline_access

Access to Exchange Web Services to load contacts from the global address list.

People.Read

Used to search the organization's global address list for contacts.

User.Read , User.ReadBasic.All

Load basic contact information and photos of all contacts.

User.Read.All

Optional scope used to load relationships between contacts (manager and direct report info).

Add Fantastical and Cardhop as allowed apps to a Microsoft 365 organization

This URL can be used by a Microsoft 365 admin to authorize Fantastical as an allowed app:

https://login.microsoftonline.com/common/oauth2/authorize?response_type=code&client_id=395befa1-fd95-454c-8286-2948ada76320&resource=https%3A%2F%2Foutlook.office365.com%2F&redirect_uri=https%3A%2F%2Fflexibits.com%2Ffantastical&state=YT1odHRwcyUzQSUyRiUyRmxvZ2luLm1pY3Jvc29mdG9ubGluZS5jb20lMkZjb21tb24mcj1odHRwcyUzQSUyRiUyRm91dGxvb2sub2ZmaWNlMzY1LmNvbSUyRg&prompt=admin_consent

Fantastical's client ID is 395befa1-fd95-454c-8286-2948ada76320, which can also be added manually by an admin.

Cardhop for Mac's client ID is 4ed7a114-18f4-43ab-982e-2716a65dd842.

Cardhop for iOS's client ID is 7238b6c4-4cc8-413b-ab25-6c1e401996c6.