Kard · OAuth Scopes

Kard OAuth Scopes

OAuth 2.0 searched

Kard publishes 13 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Kard API on a user’s behalf.

Tokens are issued from https://{client-subdomain}.getkard.com/v2/auth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyRewardsCard-Linked OffersLoyaltyFintechCommerce MediaAdvertisingTransactionsCashbackWebhooks

Scopes: 13 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://{client-subdomain}.getkard.com/v2/auth/token

Flows
clientCredentials

Scopes (13)

Scope	Description	Flows
transaction:read	Read transactions and matched/earned reward data.	clientCredentials
transaction:write	Submit incoming transactions for CLO matching.	clientCredentials
audit:read	Read transaction audit records.	clientCredentials
audit:write	Create transaction audit records.	clientCredentials
user:read	Read enrolled user records.	clientCredentials
user:write	Create enrolled users.	clientCredentials
user:update	Update enrolled user records.	clientCredentials
user:delete	Delete enrolled user records.	clientCredentials
rewards:read	Read offers and locations available to a user.	clientCredentials
attributions:write	Create attribution events, activate and boost offers, activate placement slots.	clientCredentials
notifications:read	List and read notification events and subscriptions.	clientCredentials
notifications:write	Create/update notification subscriptions and replay notifications.	clientCredentials
files:write	Create and upload files / bulk transaction uploads.	clientCredentials

📄 Provider scope reference: https://docs.getkard.com/api/integration-guides/authentication

Source

OAuth Scopes

generated: '2026-07-19'
method: searched
source: openapi/kard-api-reference-openapi.yaml
docs: https://docs.getkard.com/api/integration-guides/authentication
schemes:
- name: OAuthScheme
  source: openapi/kard-api-reference-openapi.yaml
  flows:
  - flow: clientCredentials
    tokenUrl: https://{client-subdomain}.getkard.com/v2/auth/token
notes: The OpenAPI declares an http/bearer scheme, but the docs and per-operation
  'Required scopes' annotations show OAuth2 client_credentials with the scopes below.
  Scopes harvested from the OpenAPI operation descriptions.
scopes:
- scope: transaction:read
  description: Read transactions and matched/earned reward data.
  flows:
  - clientCredentials
- scope: transaction:write
  description: Submit incoming transactions for CLO matching.
  flows:
  - clientCredentials
- scope: audit:read
  description: Read transaction audit records.
  flows:
  - clientCredentials
- scope: audit:write
  description: Create transaction audit records.
  flows:
  - clientCredentials
- scope: user:read
  description: Read enrolled user records.
  flows:
  - clientCredentials
- scope: user:write
  description: Create enrolled users.
  flows:
  - clientCredentials
- scope: user:update
  description: Update enrolled user records.
  flows:
  - clientCredentials
- scope: user:delete
  description: Delete enrolled user records.
  flows:
  - clientCredentials
- scope: rewards:read
  description: Read offers and locations available to a user.
  flows:
  - clientCredentials
- scope: attributions:write
  description: Create attribution events, activate and boost offers, activate placement
    slots.
  flows:
  - clientCredentials
- scope: notifications:read
  description: List and read notification events and subscriptions.
  flows:
  - clientCredentials
- scope: notifications:write
  description: Create/update notification subscriptions and replay notifications.
  flows:
  - clientCredentials
- scope: files:write
  description: Create and upload files / bulk transaction uploads.
  flows:
  - clientCredentials