---
title: Scripting API
description: AM provides the following functionality and artifacts for scripting:
component: pingam
version: 7.4
page_id: pingam:am-scripting:scripting-api
canonical_url: https://docs.pingidentity.com/pingam/8.1/am-scripting/scripting-api.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
keywords: ["Scripts", "OAuth 2.0"]
page_aliases: ["scripting-guide:scripting-api.adoc"]
superseded_by: https://docs.pingidentity.com/pingam/8.1/am-scripting/scripting-api.html
---

# Scripting API

AM provides the following functionality and artifacts for scripting:

* [Scripted decision node API](scripting-api-node.html)

  (*Authentication trees only*)

  Access data in request headers, shared state, and user session data.

* [Policy Condition Script API](../am-authorization/scripted-policy-condition.html#scripting-api-policy)

  Access the authorization state data, the information pertaining a session, and the user's profile data in authorization policies.

* [Customize OAuth 2.0](../am-oauth2/customizing-oauth2-scopes.html)

  Extend authorization server behavior with the OAuth 2.0 plugins:

  * **[Access token modification](../am-oauth2/modifying-access-tokens-scripts.html)** Modify the key-value pairs contained within an OAuth 2.0 access token.

  * **[Authorize endpoint data provider](../am-oauth2/plugins-auth-endpoint-data-provider.html)** Return additional data from an authorization request.

  * **[Scope evaluation](../am-oauth2/plugins-scope-evaluator.html)** Evaluate and return an OAuth2 access token's scope information.

  * **[Scope validation](../am-oauth2/plugins-scope-validator.html)** Customize the set of requested scopes for authorize, access token, refresh token and back channel authorize requests.

  * **[OIDC user info claims](../am-oauth2/plugins-user-info-claims.html)** Map scopes to claims and data for OpenID Connect ID tokens.

* [Token exchange](../am-oauth2/token-exchange.html)

  Add `may_act` claims to OAuth 2.0/OpenID Connect exchanged tokens.

* [Scripted module API](../am-authentication/scripting-api-authn.html)

  (Deprecated: *Authentication chains only*)

  Access authentication state data, user profile data, request data, and information gathered by client-side scripts.