Pismo · OAuth Scopes

Pismo OAuth Scopes

OAuth 2.0 searched

Pismo publishes 3 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Pismo API on a user’s behalf.

Tokens are issued from https://api.pismo.io/passport/v2/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

BankingCard IssuingPaymentsFintechCore BankingCloud Native

Scopes: 3 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://api.pismo.io/passport/v2/oauth/token

Flows
clientCredentials

Scopes (3)

Scope	Description	Flows
pismo-v1:accounts:rw	Read-write access to the accounts group of endpoints; documented as an example permission-group scope in the OAuth2 authentication guide.
pismo-v1:cards:rw	Read-write access to the cards group of endpoints; documented as an example permission-group scope in the OAuth2 authentication guide.
pismo-v1:bankaccounts:rw	Read-write access to the bank accounts group of endpoints; documented as an example permission-group scope in the OAuth2 authentication guide.

📄 Provider scope reference: https://developers.pismo.io/pismo-docs/docs/authentication-with-oauth2

Source

OAuth Scopes

generated: '2026-07-11'
method: searched
source: openapi/pismo-openapi.yml
docs: https://developers.pismo.io/pismo-docs/docs/authentication-with-oauth2
note: Pismo uses OAuth 2.0 client-credentials tokens with permission-group scopes
  of the form pismo-v1:<resource>:<access>; only three example scopes are publicly
  documented, and the complete list of API permission groups is only viewable by
  customers inside Control Center per
  https://developers.pismo.io/pismo-docs/docs/cc-api-permission-groups.
schemes:
- name: oauth2
  source: openapi/pismo-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.pismo.io/passport/v2/oauth/token
scopes:
- scope: pismo-v1:accounts:rw
  description: Read-write access to the accounts group of endpoints; documented as
    an example permission-group scope in the OAuth2 authentication guide.
  sources:
  - https://developers.pismo.io/pismo-docs/docs/authentication-with-oauth2
- scope: pismo-v1:cards:rw
  description: Read-write access to the cards group of endpoints; documented as an
    example permission-group scope in the OAuth2 authentication guide.
  sources:
  - https://developers.pismo.io/pismo-docs/docs/authentication-with-oauth2
- scope: pismo-v1:bankaccounts:rw
  description: Read-write access to the bank accounts group of endpoints; documented
    as an example permission-group scope in the OAuth2 authentication guide.
  sources:
  - https://developers.pismo.io/pismo-docs/docs/authentication-with-oauth2