Puzzle · OAuth Scopes

Puzzle OAuth Scopes

OAuth 2.0 searched

Puzzle publishes 21 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Puzzle API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyAccountingFinancialBookkeepingFintechGeneral LedgerPayrollAgent-NativeMCP

Scopes: 21 Flows: Method: searched

Scopes (21)

Scope	Description	Flows
read:company	Grants read-only access to company data.
write:company	Allows creating or updating company info.
write:account	Allows creating financial accounts.
write:transaction	Allows creating transactions.
write:account_balance	Allows creating financial account balances.
write:benefit	Allows creating company benefit policies.
write:department	Allows creating departments.
write:location	Allows creating office locations.
write:worker	Allows creating employees and contractors.
write:payroll	Allows creating payrolls.
write:journal	Allows creating and updating journal entries.
write:bill	Allows creating bills.
write:customer	Allows creating customers.
write:integration_connection	Allows creating integration connections.
write:invoice	Allows creating invoices.
write:product	Allows creating products.
write:request	Allows creating requests.
write:task	Allows creating tasks.
write:vendor	Allows creating vendors.
write:classification	Allows creating classifications.
offline_access	Allows obtaining a refresh token for long-lived access.

📄 Provider scope reference: https://puzzle-api.readme.io/docs/scopes

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://puzzle-api.readme.io/docs/scopes
docs: https://puzzle-api.readme.io/docs/scopes
schemes:
- name: OAuth2
  flow: authorizationCode
  pkce: true
  authorizationUrl: https://api.puzzle.io/oauth/authorize
  tokenUrl: https://api.puzzle.io/oauth/token
default_scopes: [offline_access, read:company]
notes: >-
  Scopes are requested at /oauth/authorize. If no scopes are provided, the read-only
  scopes (offline_access, read:company) are used by default. Scopes are documented in
  the developer docs; the OpenAPI document itself does not declare oauth2 securitySchemes,
  so these were captured from the scopes reference page.
scopes:
- {scope: 'read:company', description: Grants read-only access to company data.}
- {scope: 'write:company', description: Allows creating or updating company info.}
- {scope: 'write:account', description: Allows creating financial accounts.}
- {scope: 'write:transaction', description: Allows creating transactions.}
- {scope: 'write:account_balance', description: Allows creating financial account balances.}
- {scope: 'write:benefit', description: Allows creating company benefit policies.}
- {scope: 'write:department', description: Allows creating departments.}
- {scope: 'write:location', description: Allows creating office locations.}
- {scope: 'write:worker', description: Allows creating employees and contractors.}
- {scope: 'write:payroll', description: Allows creating payrolls.}
- {scope: 'write:journal', description: Allows creating and updating journal entries.}
- {scope: 'write:bill', description: Allows creating bills.}
- {scope: 'write:customer', description: Allows creating customers.}
- {scope: 'write:integration_connection', description: Allows creating integration connections.}
- {scope: 'write:invoice', description: Allows creating invoices.}
- {scope: 'write:product', description: Allows creating products.}
- {scope: 'write:request', description: Allows creating requests.}
- {scope: 'write:task', description: Allows creating tasks.}
- {scope: 'write:vendor', description: Allows creating vendors.}
- {scope: 'write:classification', description: Allows creating classifications.}
- {scope: 'offline_access', description: Allows obtaining a refresh token for long-lived access.}