Pular para o conteúdo principal

Scopes

Scopes control what a token can access. Each scope follows the resource:action format (e.g. orders:read). The scopes available to a token depend on the token type and what was granted to your connector during registration.

How scopes work​

  • When requesting a token via POST /oauth/token, you can optionally pass a scope parameter with a space-separated list of scopes
  • If omitted, the token includes all scopes your client is allowed
  • If you request a scope not in your client's allowed list, the response is invalid_scope
  • Scopes are enforced on every API call — a 403 with missing_scopes means the token lacks the required scope

Company-level scopes​

Available with a Company Token (include company_id in the token request).

ScopeDescription
menu:readRead menu categories and products
menu:writeCreate and update products
orders:readRead orders
orders:writeCreate orders, update order status, items, payments and discounts, and cancel orders
promotions:readRead active promotions and coupons
promotions:writeCreate, update, and delete promotions (coupons)
clients:readRead client list with filters and pagination
clients:writeCreate and update clients
addresses:readList client delivery addresses
addresses:writeCreate, update, and delete client delivery addresses
reports:readRead reports
webhooks:readList and view webhook configurations
webhooks:writeCreate, update, and delete webhooks
companies:readRead company information
payment-methods:readRead the company payment methods
stores:readRead food-app store open/closed status
users:readRead the company user list with role filter and pagination
fiscal-notes:writeCreate and update fiscal note invoices
logistics:writeAssign riders and update delivery status
cashiers:readRead cash register openings and closings

Connector-level scopes​

Available with a Connector Token (omit company_id from the token request).

ScopeDescription
conections:readList connector conections
conections:writeUpdate conection status
portfolio:readRead the connector portfolio of companies on the qualifying plan