PayPal · OAuth Scopes

PayPal OAuth Scopes

OAuth 2.0 derived

PayPal publishes 39 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the PayPal API on a user’s behalf.

Tokens are issued from /v1/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

BillingCommerceDisputesInvoicesOrderPaymentsPayoutsSubscriptionTokensWebhook

Scopes: 39 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
/v1/oauth2/token https://api-m.paypal.com/v1/oauth2/token

Flows
clientCredentials

Scopes (39)

Scope	Description	Flows
https://uri.paypal.com/payments/payouts	Payout to a list of recipients.	clientCredentials
https://uri.paypal.com/services/applications/verify-webhook-signature	Verify Webhook Signature	clientCredentials
https://uri.paypal.com/services/applications/webhooks	Access/update Webhooks.	clientCredentials
https://uri.paypal.com/services/customer/partner	Manage seller resources.	clientCredentials
https://uri.paypal.com/services/customer/partner-referrals	Manage referral data shared by Partner with PayPal. To be used by only internal apps	clientCredentials
https://uri.paypal.com/services/customer/partner-referrals/readwrite	Manage external referral data with PayPal	clientCredentials
https://uri.paypal.com/services/disputes/create	This privilege allows client to validate eligibility and create a dispute on his transaction(s).	clientCredentials
https://uri.paypal.com/services/disputes/read	This privilege allows client to read and search a dispute of an user with all fields.	clientCredentials
https://uri.paypal.com/services/disputes/read-buyer	This privilege allows client to read and search disputes but returns a limited and allowed set of fields back.	clientCredentials
https://uri.paypal.com/services/disputes/read-ebay	This privilege allows client to read and search a disputes of an user but gets only a limited and allowed set of fields back to ebay.	clientCredentials
https://uri.paypal.com/services/disputes/read-partner	This privilege allows client to read and search disputes but returns a limited and allowed set of fields back.	clientCredentials
https://uri.paypal.com/services/disputes/read-seller	This privilege allows client to read and search a disputes of a merchant but gets only a limited and allowed set of fields back .	clientCredentials
https://uri.paypal.com/services/disputes/update-buyer	This privilege allows client to update a dispute (customer actions).	clientCredentials
https://uri.paypal.com/services/disputes/update-partner	This privilege allows client to update a dispute (Partner actions).	clientCredentials
https://uri.paypal.com/services/disputes/update-seller	This privilege allows client to update a dispute (Merchant actions).	clientCredentials
https://uri.paypal.com/services/disputes/webhooks	This privilege allows webhook platform to read a dispute event	clientCredentials
https://uri.paypal.com/services/invoicing/internal	Manage invoice resource internal clients.	clientCredentials
https://uri.paypal.com/services/invoicing/invoices/read	For Reading the invoice details.	clientCredentials
https://uri.paypal.com/services/invoicing/invoices/readwrite	For managing (Create, Update, Delete) invoice.	clientCredentials
https://uri.paypal.com/services/payments/initiatepayment	Initiates payments and checkout workflows.	clientCredentials
https://uri.paypal.com/services/payments/non-referenced-credit	Permission to initiate non referenced credit	clientCredentials
https://uri.paypal.com/services/payments/orders/client-side-integration	Allows client-side integration on Create, Get, Patch, Authorize & Capture Order endpoints.	clientCredentials
https://uri.paypal.com/services/payments/payment	Manage payments and checkout workflow.	clientCredentials
https://uri.paypal.com/services/payments/payment/authcapture	Permission to do non-real time payments like capture on authorization	clientCredentials
https://uri.paypal.com/services/payments/payment/reference-transaction	Permission to initiate reference transaction	clientCredentials
https://uri.paypal.com/services/payments/payouts-item/reverse	For reversing a completed payout item.	clientCredentials
https://uri.paypal.com/services/payments/realtimepayment	Permission to do any real-time payment and manage-payment experience profiles with support for sale, authorize, and order intents.	clientCredentials
https://uri.paypal.com/services/payments/refund	Permission to initiate a refund on a capture transaction	clientCredentials
https://uri.paypal.com/services/payments/reversepayment	Permission to do any reverse payment	clientCredentials
https://uri.paypal.com/services/referred-disputes/readwrite	This privilege allows client to read and update a referred dispute.	clientCredentials
https://uri.paypal.com/services/reporting/balances/read	List Balances	clientCredentials
https://uri.paypal.com/services/reporting/search/read	Transactions Search	clientCredentials
https://uri.paypal.com/services/shipping/trackers/read	Retrieve tracking information	clientCredentials
https://uri.paypal.com/services/shipping/trackers/readwrite	Create or update tracking information	clientCredentials
https://uri.paypal.com/services/subscriptions	Manage plan & subscription	clientCredentials
https://uri.paypal.com/services/vault/customers/read	Permission to read customer information.	clientCredentials
https://uri.paypal.com/services/vault/customers/readwrite	Permission to create/update customer information.	clientCredentials
https://uri.paypal.com/services/vault/payment-tokens/read	Permission to only read from vault	clientCredentials
https://uri.paypal.com/services/vault/payment-tokens/readwrite	Manage payment instruments	clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/paypal-billing-subscriptions-openapi-original.yml, openapi/paypal-catalog-products-openapi-original.yml,
  openapi/paypal-checkout-orders-openapi-original.yml, openapi/paypal-customer-disputes-openapi-original.yml,
  openapi/paypal-customer-partner-referrals-openapi-original.yml, openapi/paypal-invoicing-openapi-original.yml,
  openapi/paypal-notification-webhooks-openapi-original.yml, openapi/paypal-payment-experience-openapi-original.yml,
  openapi/paypal-payments-openapi-original.yml, openapi/paypal-payouts-openapi-original.yml,
  openapi/paypal-reporting-transactions-openapi-original.yml, openapi/paypal-shipping-tracking-openapi-original.yml,
  openapi/paypal-vault-payment-tokens-openapi-original.yml
schemes:
- name: Oauth2
  source: openapi/paypal-billing-subscriptions-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-catalog-products-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-checkout-orders-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-customer-disputes-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-customer-partner-referrals-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-invoicing-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-notification-webhooks-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-payment-experience-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-payments-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: OAuth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-payouts-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-reporting-transactions-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://api-m.paypal.com/v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-shipping-tracking-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
- name: Oauth2
  source: openapi/paypal-vault-payment-tokens-openapi-original.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /v1/oauth2/token
  description: Oauth 2.0 authentication
scopes:
- scope: https://uri.paypal.com/payments/payouts
  description: Payout to a list of recipients.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payouts-openapi-original.yml
- scope: https://uri.paypal.com/services/applications/verify-webhook-signature
  description: Verify Webhook Signature
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-notification-webhooks-openapi-original.yml
- scope: https://uri.paypal.com/services/applications/webhooks
  description: Access/update Webhooks.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-notification-webhooks-openapi-original.yml
- scope: https://uri.paypal.com/services/customer/partner
  description: Manage seller resources.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-partner-referrals-openapi-original.yml
- scope: https://uri.paypal.com/services/customer/partner-referrals
  description: Manage referral data shared by Partner with PayPal. To be used by only internal
    apps
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-partner-referrals-openapi-original.yml
- scope: https://uri.paypal.com/services/customer/partner-referrals/readwrite
  description: Manage external referral data with PayPal
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-partner-referrals-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/create
  description: This privilege allows client to validate eligibility and create a dispute on
    his transaction(s).
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/read
  description: This privilege allows client to read and search a dispute of an user with all
    fields.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/read-buyer
  description: This privilege allows client to read and search disputes but returns a limited
    and allowed set of fields back.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/read-ebay
  description: This privilege allows client to read and search a disputes of an user but gets
    only a limited and allowed set of fields back to ebay.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/read-partner
  description: This privilege allows client to read and search disputes but returns a limited
    and allowed set of fields back.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/read-seller
  description: This privilege allows client to read and search a disputes of a merchant but
    gets only a limited and allowed set of fields back .
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/update-buyer
  description: This privilege allows client to update a dispute (customer actions).
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/update-partner
  description: This privilege allows client to update a dispute (Partner actions).
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/update-seller
  description: This privilege allows client to update a dispute (Merchant actions).
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/disputes/webhooks
  description: This privilege allows webhook platform to read a dispute event
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/invoicing/internal
  description: Manage invoice resource internal clients.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-invoicing-openapi-original.yml
- scope: https://uri.paypal.com/services/invoicing/invoices/read
  description: For Reading the invoice details.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-invoicing-openapi-original.yml
- scope: https://uri.paypal.com/services/invoicing/invoices/readwrite
  description: For managing (Create, Update, Delete) invoice.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-invoicing-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/initiatepayment
  description: Initiates payments and checkout workflows.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-checkout-orders-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/non-referenced-credit
  description: Permission to initiate non referenced credit
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payments-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/orders/client-side-integration
  description: Allows client-side integration on Create, Get, Patch, Authorize & Capture Order
    endpoints.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-checkout-orders-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/payment
  description: Manage payments and checkout workflow.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-checkout-orders-openapi-original.yml
  - openapi/paypal-payment-experience-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/payment/authcapture
  description: Permission to do non-real time payments like capture on authorization
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payments-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/payment/reference-transaction
  description: Permission to initiate reference transaction
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-checkout-orders-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/payouts-item/reverse
  description: For reversing a completed payout item.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payouts-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/realtimepayment
  description: Permission to do any real-time payment and manage-payment experience profiles
    with support for sale, authorize, and order intents.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payment-experience-openapi-original.yml
  - openapi/paypal-payments-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/refund
  description: Permission to initiate a refund on a capture transaction
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payments-openapi-original.yml
- scope: https://uri.paypal.com/services/payments/reversepayment
  description: Permission to do any reverse payment
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-payments-openapi-original.yml
- scope: https://uri.paypal.com/services/referred-disputes/readwrite
  description: This privilege allows client to read and update a referred dispute.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-customer-disputes-openapi-original.yml
- scope: https://uri.paypal.com/services/reporting/balances/read
  description: List Balances
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-reporting-transactions-openapi-original.yml
- scope: https://uri.paypal.com/services/reporting/search/read
  description: Transactions Search
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-reporting-transactions-openapi-original.yml
- scope: https://uri.paypal.com/services/shipping/trackers/read
  description: Retrieve tracking information
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-shipping-tracking-openapi-original.yml
- scope: https://uri.paypal.com/services/shipping/trackers/readwrite
  description: Create or update tracking information
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-shipping-tracking-openapi-original.yml
- scope: https://uri.paypal.com/services/subscriptions
  description: Manage plan & subscription
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-billing-subscriptions-openapi-original.yml
  - openapi/paypal-catalog-products-openapi-original.yml
- scope: https://uri.paypal.com/services/vault/customers/read
  description: Permission to read customer information.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-vault-payment-tokens-openapi-original.yml
- scope: https://uri.paypal.com/services/vault/customers/readwrite
  description: Permission to create/update customer information.
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-vault-payment-tokens-openapi-original.yml
- scope: https://uri.paypal.com/services/vault/payment-tokens/read
  description: Permission to only read from vault
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-vault-payment-tokens-openapi-original.yml
- scope: https://uri.paypal.com/services/vault/payment-tokens/readwrite
  description: Manage payment instruments
  flows:
  - clientCredentials
  sources:
  - openapi/paypal-vault-payment-tokens-openapi-original.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/paypal-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.