braintree · OAuth Scopes

braintree OAuth Scopes

OAuth 2.0 searched

braintree publishes 40 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the braintree API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Scopes: 40 Flows: Method: searched

Scopes (40)

Scope	Description	Flows
shared_vault_transactions	Create transactions for a connected merchant using payment methods stored in the platform's own Shared Vault.
grant_payment_method	Grant a customer's vaulted payment method from one account to another via the Grant API.
read_facilitated_transactions	Read transactions facilitated on behalf of connected merchants.
view_facilitated_transaction_metrics	View aggregated metrics for facilitated transactions.
transaction:sale	Create sale transactions.
transaction:refund	Refund transactions.
transaction:void	Void transactions.
transaction:find	Retrieve a transaction.
transaction:search	Search transactions.
transaction:clone	Clone a transaction.
transaction:manage_escrow	Manage escrow (hold/release) on marketplace transactions.
transaction:manage_settlement	Manage settlement of transactions.
customer:create	Create customers.
customer:update	Update customers.
customer:delete	Delete customers.
customer:find	Retrieve a customer.
customer:search	Search customers.
payment_method:create	Vault a payment method.
payment_method:update	Update a vaulted payment method.
payment_method:delete	Delete a vaulted payment method.
payment_method:find	Retrieve a vaulted payment method.
subscription:create	Create subscriptions.
subscription:update	Update subscriptions.
subscription:cancel	Cancel subscriptions.
subscription:find	Retrieve a subscription.
subscription:search	Search subscriptions.
address:create	Create customer addresses.
address:update	Update customer addresses.
address:delete	Delete customer addresses.
address:find	Retrieve a customer address.
dispute:find	Retrieve a dispute.
dispute:search	Search disputes.
dispute:accept	Accept a dispute.
dispute:finalize	Finalize a dispute.
dispute:add_evidence	Add evidence to a dispute.
dispute:remove_evidence	Remove evidence from a dispute.
client_token:generate	Generate client tokens for client SDK initialization.
credit_card_verification:search	Search credit card verifications.
credit_card:expiring_between	Find credit cards expiring within a date range.
apple_pay:manage_web_domains	Manage registered Apple Pay web domains.

📄 Provider scope reference: https://developer.paypal.com/braintree/docs/guides/extend/oauth/overview

Source

OAuth Scopes

generated: '2026-07-14'
method: searched
source: https://developer.paypal.com/braintree/docs/guides/extend/oauth/reference
docs: https://developer.paypal.com/braintree/docs/guides/extend/oauth/overview
description: >-
  Braintree's OAuth 2.0 scopes. The core gateway authenticates with HTTP Basic
  API keys, so the OpenAPI securitySchemes declare no oauth2 flows and the derive
  pass finds none. OAuth is used by platforms/partners to connect separate
  Braintree accounts — on its own or with the Grant API and Shared Vault. The
  connect URL is generated server-side via the SDK (gateway.oauth.connectUrl),
  and the access token is exchanged from the returned authorization code; scopes
  are requested as a comma-delimited string (e.g. grant_payment_method,shared_vault_transactions).
schemes:
  - name: Braintree OAuth
    type: oauth2
    grant_types: [authorization_code, refresh_token]
    connect_url_note: Generated server-side via gateway.oauth.connectUrl(redirectUri, scope, state).
    token_note: Access token created from the authorization code via the server SDK (createTokenFromCode).
    docs: https://developer.paypal.com/braintree/docs/guides/extend/oauth/reference
    notes: >-
      Scopes are requested as a comma-delimited string on the connect URL.
      Coarse connect-flow scopes (below) plus a fine-grained per-resource
      permission model are both documented.
scopes:
  # Cross-account / platform scopes
  - {scope: shared_vault_transactions, description: 'Create transactions for a connected merchant using payment methods stored in the platform''s own Shared Vault.', schemes: [Braintree OAuth]}
  - {scope: grant_payment_method, description: 'Grant a customer''s vaulted payment method from one account to another via the Grant API.', schemes: [Braintree OAuth]}
  - {scope: read_facilitated_transactions, description: 'Read transactions facilitated on behalf of connected merchants.', schemes: [Braintree OAuth]}
  - {scope: view_facilitated_transaction_metrics, description: 'View aggregated metrics for facilitated transactions.', schemes: [Braintree OAuth]}
  # Fine-grained resource permission scopes
  - {scope: 'transaction:sale', description: 'Create sale transactions.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:refund', description: 'Refund transactions.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:void', description: 'Void transactions.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:find', description: 'Retrieve a transaction.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:search', description: 'Search transactions.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:clone', description: 'Clone a transaction.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:manage_escrow', description: 'Manage escrow (hold/release) on marketplace transactions.', schemes: [Braintree OAuth]}
  - {scope: 'transaction:manage_settlement', description: 'Manage settlement of transactions.', schemes: [Braintree OAuth]}
  - {scope: 'customer:create', description: 'Create customers.', schemes: [Braintree OAuth]}
  - {scope: 'customer:update', description: 'Update customers.', schemes: [Braintree OAuth]}
  - {scope: 'customer:delete', description: 'Delete customers.', schemes: [Braintree OAuth]}
  - {scope: 'customer:find', description: 'Retrieve a customer.', schemes: [Braintree OAuth]}
  - {scope: 'customer:search', description: 'Search customers.', schemes: [Braintree OAuth]}
  - {scope: 'payment_method:create', description: 'Vault a payment method.', schemes: [Braintree OAuth]}
  - {scope: 'payment_method:update', description: 'Update a vaulted payment method.', schemes: [Braintree OAuth]}
  - {scope: 'payment_method:delete', description: 'Delete a vaulted payment method.', schemes: [Braintree OAuth]}
  - {scope: 'payment_method:find', description: 'Retrieve a vaulted payment method.', schemes: [Braintree OAuth]}
  - {scope: 'subscription:create', description: 'Create subscriptions.', schemes: [Braintree OAuth]}
  - {scope: 'subscription:update', description: 'Update subscriptions.', schemes: [Braintree OAuth]}
  - {scope: 'subscription:cancel', description: 'Cancel subscriptions.', schemes: [Braintree OAuth]}
  - {scope: 'subscription:find', description: 'Retrieve a subscription.', schemes: [Braintree OAuth]}
  - {scope: 'subscription:search', description: 'Search subscriptions.', schemes: [Braintree OAuth]}
  - {scope: 'address:create', description: 'Create customer addresses.', schemes: [Braintree OAuth]}
  - {scope: 'address:update', description: 'Update customer addresses.', schemes: [Braintree OAuth]}
  - {scope: 'address:delete', description: 'Delete customer addresses.', schemes: [Braintree OAuth]}
  - {scope: 'address:find', description: 'Retrieve a customer address.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:find', description: 'Retrieve a dispute.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:search', description: 'Search disputes.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:accept', description: 'Accept a dispute.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:finalize', description: 'Finalize a dispute.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:add_evidence', description: 'Add evidence to a dispute.', schemes: [Braintree OAuth]}
  - {scope: 'dispute:remove_evidence', description: 'Remove evidence from a dispute.', schemes: [Braintree OAuth]}
  - {scope: 'client_token:generate', description: 'Generate client tokens for client SDK initialization.', schemes: [Braintree OAuth]}
  - {scope: 'credit_card_verification:search', description: 'Search credit card verifications.', schemes: [Braintree OAuth]}
  - {scope: 'credit_card:expiring_between', description: 'Find credit cards expiring within a date range.', schemes: [Braintree OAuth]}
  - {scope: 'apple_pay:manage_web_domains', description: 'Manage registered Apple Pay web domains.', schemes: [Braintree OAuth]}