Klaviyo · OAuth Scopes

Klaviyo OAuth Scopes

OAuth 2.0 searched

Klaviyo publishes 46 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Klaviyo API on a user’s behalf.

Tokens are issued from https://a.klaviyo.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

MarketingEmailSMSCustomer DataE-CommerceAutomation

Scopes: 46 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://www.klaviyo.com/oauth/authorize

Token URL
https://a.klaviyo.com/oauth/token

Flows
authorizationCode

Scopes (46)

Scope	Description	Flows
accounts:read	Read access to account metadata (company name, timezone, contact info, public API key).
campaigns:read	Read access to email/SMS/push campaigns, campaign messages, send jobs and recipient estimations.
campaigns:write	Write access to email/SMS/push campaigns, campaign messages, send jobs and recipient estimations.
catalogs:read	Read access to product catalogs — items, variants and categories, including bulk jobs.
catalogs:write	Write access to product catalogs — items, variants and categories, including bulk jobs.
conversations:read	Read access to two-way customer conversations (SMS, WhatsApp, Instagram) and their messages.
conversations:write	Write access to two-way customer conversations (SMS, WhatsApp, Instagram) and their messages.
coupon-codes:read	Read access to individual coupon codes issued against a coupon.
coupon-codes:write	Write access to individual coupon codes issued against a coupon.
coupons:read	Read access to coupon definitions.
coupons:write	Write access to coupon definitions.
custom-objects:read	Read access to custom object type definitions and their records.
custom-objects:write	Write access to custom object type definitions and their records.
data-privacy:write	Write access to gDPR/CCPA profile deletion and data-privacy requests.
events:read	Read access to customer events and the event stream.
events:write	Write access to customer events and the event stream.
flows:read	Read access to automations — flows, flow actions and flow messages.
flows:write	Write access to automations — flows, flow actions and flow messages.
forms:read	Read access to signup forms and form versions.
forms:write	Write access to signup forms and form versions.
images:read	Read access to image assets uploaded to Klaviyo.
images:write	Write access to image assets uploaded to Klaviyo.
lists:read	Read access to lists and list membership.
lists:write	Write access to lists and list membership.
metrics:read	Read access to metrics, metric properties, custom metrics and mapped metrics.
metrics:write	Write access to metrics, metric properties, custom metrics and mapped metrics.
profiles:read	Read access to customer profiles and their attributes.
profiles:write	Write access to customer profiles and their attributes.
push-tokens:read	Read access to mobile push tokens registered against a profile.
push-tokens:write	Write access to mobile push tokens registered against a profile.
reviews:read	Read access to product reviews and review requests.
reviews:write	Write access to product reviews and review requests.
segments:read	Read access to dynamic segments and segment membership.
segments:write	Write access to dynamic segments and segment membership.
subscriptions:read	Read access to marketing subscription and suppression state for a profile.
subscriptions:write	Write access to marketing subscription and suppression state for a profile.
tags:read	Read access to tags and tag associations on campaigns, flows, lists and segments.
tags:write	Write access to tags and tag associations on campaigns, flows, lists and segments.
templates:read	Read access to email/message templates, render and clone.
templates:write	Write access to email/message templates, render and clone.
tracking-settings:read	Read access to uTM and web-tracking configuration.
tracking-settings:write	Write access to uTM and web-tracking configuration.
web-feeds:read	Read access to web feeds used for dynamic content in messages.
web-feeds:write	Write access to web feeds used for dynamic content in messages.
webhooks:read	Read access to webhook subscriptions and topics.
webhooks:write	Write access to webhook subscriptions and topics.

📄 Provider scope reference: https://developers.klaviyo.com/en/docs/set_up_oauth

Source

OAuth Scopes

generated: '2026-08-13'
method: searched
source: openapi/*.yml (x-klaviyo-scopes on 302 of 308 operations)
docs: https://developers.klaviyo.com/en/docs/set_up_oauth
additional_docs:
- https://developers.klaviyo.com/en/docs/authenticate_
- https://developers.klaviyo.com/en/docs/create_a_public_oauth_app
- https://developers.klaviyo.com/en/docs/update_your_oauth_scopes
note: 'Klaviyo''s OpenAPI declares only the apiKey scheme (Klaviyo-API-Key), so a securitySchemes-only
  derivation finds zero scopes — derive-oauth-scopes.py correctly reported ''providers with oauth2: 0''.
  The real scope vocabulary is published by Klaviyo as an x-klaviyo-scopes vendor extension on each operation,
  and this file is derived from that plus the OAuth setup docs. All 46 scopes below are provider-published,
  not inferred.'
schemes:
- name: Klaviyo OAuth 2.0
  type: oauth2
  source: https://developers.klaviyo.com/en/docs/set_up_oauth
  flows:
  - flow: authorizationCode
    authorizationUrl: https://www.klaviyo.com/oauth/authorize
    tokenUrl: https://a.klaviyo.com/oauth/token
    revocationUrl: https://a.klaviyo.com/oauth/revoke
    pkce_required: true
    code_challenge_method: S256
    access_token_ttl: 1 hour (rely on expires_in)
    refresh_token_ttl: valid until app uninstall; revoked if unused for 90 days
    authorization_code_ttl: 5 minutes
scope_format: <resource>:<read|write>
scope_count: 46
scopes:
- scope: accounts:read
  resource: accounts
  access: read
  description: Read access to account metadata (company name, timezone, contact info, public API key).
  operation_count: 2
  sources:
  - openapi/klaviyo-accounts-api-openapi.yml
- scope: campaigns:read
  resource: campaigns
  access: read
  description: Read access to email/SMS/push campaigns, campaign messages, send jobs and recipient estimations.
  operation_count: 18
  sources:
  - openapi/klaviyo-campaigns-api-openapi.yml
  - openapi/klaviyo-reporting-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: campaigns:write
  resource: campaigns
  access: write
  description: Write access to email/SMS/push campaigns, campaign messages, send jobs and recipient estimations.
  operation_count: 12
  sources:
  - openapi/klaviyo-campaigns-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: catalogs:read
  resource: catalogs
  access: read
  description: Read access to product catalogs — items, variants and categories, including bulk jobs.
  operation_count: 30
  sources:
  - openapi/klaviyo-catalogs-api-openapi.yml
- scope: catalogs:write
  resource: catalogs
  access: write
  description: Write access to product catalogs — items, variants and categories, including bulk jobs.
  operation_count: 26
  sources:
  - openapi/klaviyo-catalogs-api-openapi.yml
  - openapi/klaviyo-client-api-openapi.yml
- scope: conversations:read
  resource: conversations
  access: read
  description: Read access to two-way customer conversations (SMS, WhatsApp, Instagram) and their messages.
  operation_count: 2
  sources:
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: conversations:write
  resource: conversations
  access: write
  description: Write access to two-way customer conversations (SMS, WhatsApp, Instagram) and their messages.
  operation_count: 1
  sources:
  - openapi/klaviyo-conversations-api-openapi.yml
- scope: coupon-codes:read
  resource: coupon-codes
  access: read
  description: Read access to individual coupon codes issued against a coupon.
  operation_count: 6
  sources:
  - openapi/klaviyo-coupons-api-openapi.yml
- scope: coupon-codes:write
  resource: coupon-codes
  access: write
  description: Write access to individual coupon codes issued against a coupon.
  operation_count: 4
  sources:
  - openapi/klaviyo-coupons-api-openapi.yml
- scope: coupons:read
  resource: coupons
  access: read
  description: Read access to coupon definitions.
  operation_count: 4
  sources:
  - openapi/klaviyo-coupons-api-openapi.yml
- scope: coupons:write
  resource: coupons
  access: write
  description: Write access to coupon definitions.
  operation_count: 3
  sources:
  - openapi/klaviyo-coupons-api-openapi.yml
- scope: custom-objects:read
  resource: custom-objects
  access: read
  description: Read access to custom object type definitions and their records.
  operation_count: 2
  sources:
  - openapi/klaviyo-custom-objects-api-openapi.yml
- scope: custom-objects:write
  resource: custom-objects
  access: write
  description: Write access to custom object type definitions and their records.
  operation_count: 4
  sources:
  - openapi/klaviyo-custom-objects-api-openapi.yml
- scope: data-privacy:write
  resource: data-privacy
  access: write
  description: Write access to gDPR/CCPA profile deletion and data-privacy requests.
  operation_count: 1
  sources:
  - openapi/klaviyo-data-privacy-api-openapi.yml
- scope: events:read
  resource: events
  access: read
  description: Read access to customer events and the event stream.
  operation_count: 6
  sources:
  - openapi/klaviyo-events-api-openapi.yml
- scope: events:write
  resource: events
  access: write
  description: Write access to customer events and the event stream.
  operation_count: 4
  sources:
  - openapi/klaviyo-client-api-openapi.yml
  - openapi/klaviyo-events-api-openapi.yml
- scope: flows:read
  resource: flows
  access: read
  description: Read access to automations — flows, flow actions and flow messages.
  operation_count: 23
  sources:
  - openapi/klaviyo-flows-api-openapi.yml
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-metrics-api-openapi.yml
  - openapi/klaviyo-reporting-api-openapi.yml
  - openapi/klaviyo-segments-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: flows:write
  resource: flows
  access: write
  description: Write access to automations — flows, flow actions and flow messages.
  operation_count: 6
  sources:
  - openapi/klaviyo-flows-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: forms:read
  resource: forms
  access: read
  description: Read access to signup forms and form versions.
  operation_count: 9
  sources:
  - openapi/klaviyo-forms-api-openapi.yml
  - openapi/klaviyo-reporting-api-openapi.yml
- scope: forms:write
  resource: forms
  access: write
  description: Write access to signup forms and form versions.
  operation_count: 2
  sources:
  - openapi/klaviyo-forms-api-openapi.yml
- scope: images:read
  resource: images
  access: read
  description: Read access to image assets uploaded to Klaviyo.
  operation_count: 5
  sources:
  - openapi/klaviyo-campaigns-api-openapi.yml
  - openapi/klaviyo-images-api-openapi.yml
- scope: images:write
  resource: images
  access: write
  description: Write access to image assets uploaded to Klaviyo.
  operation_count: 3
  sources:
  - openapi/klaviyo-images-api-openapi.yml
- scope: lists:read
  resource: lists
  access: read
  description: Read access to lists and list membership.
  operation_count: 15
  sources:
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-profiles-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: lists:write
  resource: lists
  access: write
  description: Write access to lists and list membership.
  operation_count: 10
  sources:
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-profiles-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: metrics:read
  resource: metrics
  access: read
  description: Read access to metrics, metric properties, custom metrics and mapped metrics.
  operation_count: 22
  sources:
  - openapi/klaviyo-events-api-openapi.yml
  - openapi/klaviyo-metrics-api-openapi.yml
- scope: metrics:write
  resource: metrics
  access: write
  description: Write access to metrics, metric properties, custom metrics and mapped metrics.
  operation_count: 4
  sources:
  - openapi/klaviyo-metrics-api-openapi.yml
- scope: profiles:read
  resource: profiles
  access: read
  description: Read access to customer profiles and their attributes.
  operation_count: 25
  sources:
  - openapi/klaviyo-events-api-openapi.yml
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-profiles-api-openapi.yml
  - openapi/klaviyo-segments-api-openapi.yml
- scope: profiles:write
  resource: profiles
  access: write
  description: Write access to customer profiles and their attributes.
  operation_count: 14
  sources:
  - openapi/klaviyo-catalogs-api-openapi.yml
  - openapi/klaviyo-client-api-openapi.yml
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: push-tokens:read
  resource: push-tokens
  access: read
  description: Read access to mobile push tokens registered against a profile.
  operation_count: 4
  sources:
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: push-tokens:write
  resource: push-tokens
  access: write
  description: Write access to mobile push tokens registered against a profile.
  operation_count: 2
  sources:
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: reviews:read
  resource: reviews
  access: read
  description: Read access to product reviews and review requests.
  operation_count: 2
  sources:
  - openapi/klaviyo-reviews-api-openapi.yml
- scope: reviews:write
  resource: reviews
  access: write
  description: Write access to product reviews and review requests.
  operation_count: 1
  sources:
  - openapi/klaviyo-reviews-api-openapi.yml
- scope: segments:read
  resource: segments
  access: read
  description: Read access to dynamic segments and segment membership.
  operation_count: 13
  sources:
  - openapi/klaviyo-profiles-api-openapi.yml
  - openapi/klaviyo-reporting-api-openapi.yml
  - openapi/klaviyo-segments-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: segments:write
  resource: segments
  access: write
  description: Write access to dynamic segments and segment membership.
  operation_count: 5
  sources:
  - openapi/klaviyo-segments-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: subscriptions:read
  resource: subscriptions
  access: read
  description: Read access to marketing subscription and suppression state for a profile.
  operation_count: 4
  sources:
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: subscriptions:write
  resource: subscriptions
  access: write
  description: Write access to marketing subscription and suppression state for a profile.
  operation_count: 5
  sources:
  - openapi/klaviyo-client-api-openapi.yml
  - openapi/klaviyo-profiles-api-openapi.yml
- scope: tags:read
  resource: tags
  access: read
  description: Read access to tags and tag associations on campaigns, flows, lists and segments.
  operation_count: 26
  sources:
  - openapi/klaviyo-campaigns-api-openapi.yml
  - openapi/klaviyo-flows-api-openapi.yml
  - openapi/klaviyo-lists-api-openapi.yml
  - openapi/klaviyo-segments-api-openapi.yml
  - openapi/klaviyo-tags-api-openapi.yml
- scope: tags:write
  resource: tags
  access: write
  description: Write access to tags and tag associations on campaigns, flows, lists and segments.
  operation_count: 14
  sources:
  - openapi/klaviyo-tags-api-openapi.yml
- scope: templates:read
  resource: templates
  access: read
  description: Read access to email/message templates, render and clone.
  operation_count: 9
  sources:
  - openapi/klaviyo-campaigns-api-openapi.yml
  - openapi/klaviyo-flows-api-openapi.yml
  - openapi/klaviyo-templates-api-openapi.yml
- scope: templates:write
  resource: templates
  access: write
  description: Write access to email/message templates, render and clone.
  operation_count: 7
  sources:
  - openapi/klaviyo-templates-api-openapi.yml
- scope: tracking-settings:read
  resource: tracking-settings
  access: read
  description: Read access to uTM and web-tracking configuration.
  operation_count: 2
  sources:
  - openapi/klaviyo-tracking-settings-api-openapi.yml
- scope: tracking-settings:write
  resource: tracking-settings
  access: write
  description: Write access to uTM and web-tracking configuration.
  operation_count: 1
  sources:
  - openapi/klaviyo-tracking-settings-api-openapi.yml
- scope: web-feeds:read
  resource: web-feeds
  access: read
  description: Read access to web feeds used for dynamic content in messages.
  operation_count: 2
  sources:
  - openapi/klaviyo-web-feeds-api-openapi.yml
- scope: web-feeds:write
  resource: web-feeds
  access: write
  description: Write access to web feeds used for dynamic content in messages.
  operation_count: 3
  sources:
  - openapi/klaviyo-web-feeds-api-openapi.yml
- scope: webhooks:read
  resource: webhooks
  access: read
  description: Read access to webhook subscriptions and topics.
  operation_count: 4
  sources:
  - openapi/klaviyo-webhooks-api-openapi.yml
- scope: webhooks:write
  resource: webhooks
  access: write
  description: Write access to webhook subscriptions and topics.
  operation_count: 3
  sources:
  - openapi/klaviyo-webhooks-api-openapi.yml
x-evidence:
- fetched: '2026-08-13'
  url: https://developers.klaviyo.com/en/docs/set_up_oauth
  http_status: 200
- fetched: '2026-08-13'
  url: https://developers.klaviyo.com/en/docs/authenticate_
  http_status: 200