Exact Online · OAuth Scopes

Exact Online OAuth Scopes

OAuth 2.0 derived

Exact Online uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

Tokens are issued from https://start.exactonline.nl/api/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AccountingERPInvoicingBusiness SoftwareCRMFinancial SoftwareSME

Scopes: 0 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://start.exactonline.nl/api/oauth2/auth

Token URL
https://start.exactonline.nl/api/oauth2/token

Flows
authorizationCode

Scopes (0)

Exact Online implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

Exact Online's OAuth 2.0 authorization code flow does not use a scope parameter (documented request parameters are client_id, redirect_uri, response_type, and force_login); access levels are instead configured per resource (None/Read/Manage) in the Exact App Center Data & Security Review and consented per division by the user (https://support.exactonline.com/community/s/article/All-All-DNO-Content-oauth-eol-oauth-devstep2?language=en_GB).

📄 Provider scope reference: https://support.exactonline.com/community/s/article/All-All-DNO-Content-oauth-eol-oauth-devstep2?language=en_GB

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/exact-online-openapi.yml
docs: https://support.exactonline.com/community/s/article/All-All-DNO-Content-oauth-eol-oauth-devstep2?language=en_GB
note: >-
  Exact Online's OAuth 2.0 authorization code flow does not use a scope
  parameter (documented request parameters are client_id, redirect_uri,
  response_type, and force_login); access levels are instead configured per
  resource (None/Read/Manage) in the Exact App Center Data & Security Review
  and consented per division by the user
  (https://support.exactonline.com/community/s/article/All-All-DNO-Content-oauth-eol-oauth-devstep2?language=en_GB).
schemes:
- name: oauth2
  source: openapi/exact-online-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://start.exactonline.nl/api/oauth2/auth
    tokenUrl: https://start.exactonline.nl/api/oauth2/token
scopes: []