Marriott International OAuth Scopes

OAuth 2.0 derived

Marriott International publishes 2 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Marriott International API on a user’s behalf.

Tokens are issued from /v3/ent-auth/sso/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

TravelUnited StatesHospitalityHotelsBookingDistributionLoyaltyShort Term RentalCorporate Travel

Scopes: 2 Flows: authorizationCode, clientCredentials Method: derived

OAuth endpoints

Authorization URL
/v3/ent-auth/sso/authorize

Token URL
/v3/ent-auth/sso/token http://example.com/oauth/token

Flows
authorizationCodeclientCredentials

Scopes (2)

Scope	Description	Flows
MANAGE_ACCT_AUTH_E	Grants access to High Risk Transaction to update	authorizationCode
write	allows modifying resources	clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-28'
method: derived
source: openapi/marriott-commerce-payment-processor-api-openapi.json, openapi/marriott-finance-status-notifier-api-openapi.json
schemes:
- name: OAuth2
  source: openapi/marriott-commerce-payment-processor-api-openapi.json
  flows:
  - flow: authorizationCode
    authorizationUrl: /v3/ent-auth/sso/authorize
    tokenUrl: /v3/ent-auth/sso/token
- name: application
  source: openapi/marriott-finance-status-notifier-api-openapi.json
  flows:
  - flow: clientCredentials
    tokenUrl: http://example.com/oauth/token
scopes:
- scope: MANAGE_ACCT_AUTH_E
  description: Grants access to High Risk Transaction to update
  flows:
  - authorizationCode
  sources:
  - openapi/marriott-commerce-payment-processor-api-openapi.json
- scope: write
  description: allows modifying resources
  flows:
  - clientCredentials
  sources:
  - openapi/marriott-finance-status-notifier-api-openapi.json