Avalara · OAuth Scopes

Avalara OAuth Scopes

OAuth 2.0 searched

Avalara publishes 24 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Avalara API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Taxes

Scopes: 24 Flows: Method: searched

Scopes (24)

Scope	Description	Flows
openid	OpenID Connect authentication (subject identity).
profile	Standard OIDC profile claims.
email	Email address claim.
phone	Phone number claim.
address	Address claim.
offline_access	Issue a refresh token for long-lived access.
avatax	Access to AvaTax sales/use tax calculation and transaction APIs.
avatax_account_override	Act against a specified AvaTax account (account override).
excise	Access to Avalara Excise tax APIs.
ecm	Access to Exemption Certificate Management (CertCapture/ECM).
saas_vat_reporting	Access to the SaaS VAT Reporting APIs.
orl	Avalara ORL (returns/reporting) service scope.
svr	Avalara SVR service scope.
crr_api	CRR API scope.
cross-border-quoting	Cross-border duty/tax quoting (landed cost).
provisioning_agent	Account/service provisioning agent scope.
elr.audit.publish	E-Invoicing and Live Reporting (ELR) audit publish scope.
content-studio-sourcing:read	Read access to Content Studio sourcing content.
content-studio-sourcing:write	Write access to Content Studio sourcing content.
content-studio-compliance:read	Read access to Content Studio compliance content.
content-studio-compliance:write	Write access to Content Studio compliance content.
studio.connector	Studio connector service scope.
studio.connector.adapter	Studio connector adapter scope.
studio.extractor.adapter	Studio extractor adapter scope.

📄 Provider scope reference: https://developer.avalara.com/api-reference/oauth/oauth/

Source

OAuth Scopes

generated: '2026-06-20'
method: searched
source: https://identity.avalara.com/.well-known/openid-configuration
docs: https://developer.avalara.com/api-reference/oauth/oauth/
notes: >-
  Avalara authenticates via IdentityServer at identity.avalara.com. The OpenID
  Connect discovery document publishes the full OAuth 2.0 surface: authorization,
  token, introspection, revocation, device-authorization and userinfo endpoints,
  the supported grant types, and the scopes_supported list captured below. The
  per-API OpenAPI specs model calls with HTTP basic/bearer (see authentication/),
  but the platform-level authorization is OAuth 2.0 / OIDC against this issuer.
issuer: https://identity.avalara.com
endpoints:
  authorization: https://identity.avalara.com/connect/authorize
  token: https://identity.avalara.com/connect/token
  userinfo: https://identity.avalara.com/connect/userinfo
  introspection: https://identity.avalara.com/connect/introspect
  revocation: https://identity.avalara.com/connect/revocation
  device_authorization: https://identity.avalara.com/connect/deviceauthorization
  end_session: https://identity.avalara.com/connect/endsession
  jwks: https://identity.avalara.com/.well-known/openid-configuration/jwks
  registration: https://identity.avalara.com/register/public
grant_types_supported:
  - authorization_code
  - client_credentials
  - refresh_token
  - implicit
  - password
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:ietf:params:oauth:grant-type:token-exchange
code_challenge_methods_supported: [plain, S256]
token_endpoint_auth_methods_supported:
  - client_secret_basic
  - client_secret_post
  - private_key_jwt
scopes:
  - scope: openid
    description: OpenID Connect authentication (subject identity).
  - scope: profile
    description: Standard OIDC profile claims.
  - scope: email
    description: Email address claim.
  - scope: phone
    description: Phone number claim.
  - scope: address
    description: Address claim.
  - scope: offline_access
    description: Issue a refresh token for long-lived access.
  - scope: avatax
    description: Access to AvaTax sales/use tax calculation and transaction APIs.
  - scope: avatax_account_override
    description: Act against a specified AvaTax account (account override).
  - scope: excise
    description: Access to Avalara Excise tax APIs.
  - scope: ecm
    description: Access to Exemption Certificate Management (CertCapture/ECM).
  - scope: saas_vat_reporting
    description: Access to the SaaS VAT Reporting APIs.
  - scope: orl
    description: Avalara ORL (returns/reporting) service scope.
  - scope: svr
    description: Avalara SVR service scope.
  - scope: crr_api
    description: CRR API scope.
  - scope: cross-border-quoting
    description: Cross-border duty/tax quoting (landed cost).
  - scope: provisioning_agent
    description: Account/service provisioning agent scope.
  - scope: elr.audit.publish
    description: E-Invoicing and Live Reporting (ELR) audit publish scope.
  - scope: content-studio-sourcing:read
    description: Read access to Content Studio sourcing content.
  - scope: content-studio-sourcing:write
    description: Write access to Content Studio sourcing content.
  - scope: content-studio-compliance:read
    description: Read access to Content Studio compliance content.
  - scope: content-studio-compliance:write
    description: Write access to Content Studio compliance content.
  - scope: studio.connector
    description: Studio connector service scope.
  - scope: studio.connector.adapter
    description: Studio connector adapter scope.
  - scope: studio.extractor.adapter
    description: Studio extractor adapter scope.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/avalara-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.