OAuth2 is an industry-standard way for individual users to share data across services via delegated authorization. When enabled, OAuth2 provides a secure way for individual users to use third party tools/plugins that Everlaw has built connections with to access the Everlaw data and tools they have access to. OAuth2 must be enabled to connect to third-party AI agents via MCP server or API.
To learn more about OAuth2, see their website: OAuth2 website.
Note
OAuth2 is not available in GovCloud.
Requirements
To enable OAuth2, you must be an Organization Admin.
Enable OAuth2
By default, OAuth2 is disabled for all organizations. To enable it:
- Go to Organization home
> API access.
- Switch on the Enable API access via OAuth2 toggle on the bottom of the API access page.
When it's on, any plugin or tool that connects to Everlaw can be accessed via OAuth2.
Any time a user forms a connection to Everlaw from a third party tool via OAuth2, they will form the connection by logging in to their Everlaw account. Before they complete the connection, they will be notified of the access requested by the tool.
The permission level and access is always enforced by the user's permission and access in Everlaw: a user cannot gain access to tools or data they don't have access to within Everlaw by using a third party tool, even if the tool asks the user for it and the user grants access.
Scopes
The scope groups that a tool might request are in the table below:
| Scope Group | Description |
| Platform_Read | List and view organizations, projects, and databases |
| User_Management_Read | View users, groups, permissions, and invitations |
| User_Management_Write | Add, modify, and remove users and invitations |
| Data_Read | View datasets, source files, documents, and field definitions |
| Data_Write | Upload data, create datasets, and modify documents and metadata |
| Review_Read | Search documents and review work product |
| DeepDive_Read | Submit Deep Dive queries and results |
| Billing_Read | View billing and sizing information |
| Security_Read | View audit events and analytics |
| Legal_Hold_Read | View legal holds |
| Legal_Hold_Write | Create, modify, and delete legal holds |
For developer details on Everlaw's OAuth2 implementation, see our technical API documentation.