QuickBooks · OAuth Scopes

QuickBooks OAuth Scopes

OAuth 2.0 searched

QuickBooks publishes 19 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the QuickBooks API on a user’s behalf.

Tokens are issued from https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AccountingBookkeepingSmall BusinessFinanceInvoicingPayrollTax
Scopes: 19 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://appcenter.intuit.com/connect/oauth2
Token URL
https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer
Flows
authorizationCode

Scopes (19)

ScopeDescriptionFlows
com.intuit.quickbooks.accounting Grants access to the QuickBooks Online Accounting API, which focuses on accounting data. authorizationCode
com.intuit.quickbooks.payment Grants access to the QuickBooks Payments API, which focuses on payments processing. authorizationCode
openid Grants access to OpenID Connect features; combine with profile, email, phone and address. authorizationCode
profile User's given and family names info authorizationCode
email User's email address authorizationCode
phone User's phone number authorizationCode
address User's physical address authorizationCode
app-foundations.custom-field-definitions.read Grants access to read Custom Fields definition data. authorizationCode
app-foundations.custom-field-definitions Grants access to read and write Custom Fields definitions data. authorizationCode
project-management.project Grants access to read and write Project data. authorizationCode
indirect-tax.tax-calculation.quickbooks Grants access to the Sales Tax API. authorizationCode
payroll.compensation.read Grants read access to pay types (i.e., compensation) using the Time API. Compensation data can only be queried for customers using QuickBooks Payroll. authorizationCode
qb.company.read Grants read access to company information. authorizationCode
qb.company.taxidentifier.read Grants read access to the tax identifier (EIN, CBN) for the company. authorizationCode
qb.employee.read Grants read access to employee data. authorizationCode
qb.employee.taxidentifier.read Grants read access to the tax identifier (SSN, SIN) for the employee. authorizationCode
qb.employee.birthdate.read Grants read access to employee date of birth. authorizationCode
qb.payroll.compensation.read Grants read access to payslips. authorizationCode
qb.payroll.benefits Grants access to payroll benefits, deductions, and pensions. authorizationCode

📄 Provider scope reference: https://developer.intuit.com/app/developer/qbo/docs/learn/scopes

Source

OAuth Scopes

Raw ↑ 
name: QuickBooks OAuth 2.0 scopes
generated: '2026-11-05'
method: searched
source: https://developer.intuit.com/app/developer/qbo/docs/learn/scopes
docs: https://developer.intuit.com/app/developer/qbo/docs/learn/scopes
sources:
- https://developer.intuit.com/app/developer/qbo/docs/learn/scopes
- https://developer.intuit.com/app/developer/qbpayments/docs/learn/scopes
- https://developer.intuit.com/app/developer/qbo/docs/learn/premium-apis
- https://developer.intuit.com/app/developer/payroll-time/docs/develop
- https://developer.api.intuit.com/.well-known/openid_configuration
- openapi/quickbooks-online-accounting-openapi-generated.yml
- openapi/quickbooks-payments-openapi-generated.yml
derived_from: derive-oauth-scopes.py over the generated contracts (7 scopes), upgraded with the scopes pages
note: >-
  Scopes are requested in the authorization request to https://appcenter.intuit.com/connect/oauth2.
  Intuit recommends requesting them incrementally; changing an app's scopes requires users to
  re-authorize. GraphQL "premium API" scopes appear under Restricted scopes only for Silver, Gold and
  Platinum partners. Workforce payroll scopes are restricted and granted by Intuit on request.
schemes:
- name: oauth2
  source: openapi/quickbooks-online-accounting-openapi-generated.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://appcenter.intuit.com/connect/oauth2
    tokenUrl: https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer
  description: 'Intuit OAuth 2.0 (authorization code). Discovery: https://developer.api.intuit.com/.well-known/openid_configuration'
- name: oauth2
  source: openapi/quickbooks-payments-openapi-generated.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://appcenter.intuit.com/connect/oauth2
    tokenUrl: https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer
  description: 'Intuit OAuth 2.0 (authorization code). Discovery: https://developer.api.intuit.com/.well-known/openid_configuration'
scopes:
- scope: com.intuit.quickbooks.accounting
  description: Grants access to the QuickBooks Online Accounting API, which focuses on accounting data.
  api: QuickBooks Online Accounting API
  flows: [authorizationCode]
  sources: [openapi/quickbooks-online-accounting-openapi-generated.yml, https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: com.intuit.quickbooks.payment
  description: Grants access to the QuickBooks Payments API, which focuses on payments processing.
  api: QuickBooks Payments API
  flows: [authorizationCode]
  sources: [openapi/quickbooks-payments-openapi-generated.yml, https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: openid
  description: Grants access to OpenID Connect features; combine with profile, email, phone and address.
  api: OpenID Connect
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes, https://developer.api.intuit.com/.well-known/openid_configuration]
- scope: profile
  description: User's given and family names info
  api: OpenID Connect
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes, https://developer.api.intuit.com/.well-known/openid_configuration]
- scope: email
  description: User's email address
  api: OpenID Connect
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes, https://developer.api.intuit.com/.well-known/openid_configuration]
- scope: phone
  description: User's phone number
  api: OpenID Connect
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes, https://developer.api.intuit.com/.well-known/openid_configuration]
- scope: address
  description: User's physical address
  api: OpenID Connect
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes, https://developer.api.intuit.com/.well-known/openid_configuration]
- scope: app-foundations.custom-field-definitions.read
  description: Grants access to read Custom Fields definition data.
  api: QuickBooks Online GraphQL API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: app-foundations.custom-field-definitions
  description: Grants access to read and write Custom Fields definitions data.
  api: QuickBooks Online GraphQL API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: project-management.project
  description: Grants access to read and write Project data.
  api: QuickBooks Online GraphQL API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: indirect-tax.tax-calculation.quickbooks
  description: Grants access to the Sales Tax API.
  api: QuickBooks Online GraphQL API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: payroll.compensation.read
  description: Grants read access to pay types (i.e., compensation) using the Time API. Compensation data can only be queried for customers using QuickBooks Payroll.
  api: QuickBooks Online GraphQL API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/qbo/docs/learn/scopes]
- scope: qb.company.read
  description: Grants read access to company information.
  api: QuickBooks Workforce Payroll API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.company.taxidentifier.read
  description: Grants read access to the tax identifier (EIN, CBN) for the company.
  api: QuickBooks Workforce Payroll API
  restricted: true
  sensitive: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.employee.read
  description: Grants read access to employee data.
  api: QuickBooks Workforce Payroll API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.employee.taxidentifier.read
  description: Grants read access to the tax identifier (SSN, SIN) for the employee.
  api: QuickBooks Workforce Payroll API
  restricted: true
  sensitive: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.employee.birthdate.read
  description: Grants read access to employee date of birth.
  api: QuickBooks Workforce Payroll API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.payroll.compensation.read
  description: Grants read access to payslips.
  api: QuickBooks Workforce Payroll API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]
- scope: qb.payroll.benefits
  description: Grants access to payroll benefits, deductions, and pensions.
  api: QuickBooks Workforce Payroll API
  restricted: true
  flows: [authorizationCode]
  sources: [https://developer.intuit.com/app/developer/payroll-time/docs/develop]

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set 
curl "https://apis.io/api/v1/scopes/quickbooks-scopes"
All oauth scopes 
curl "https://apis.io/api/v1/scopes?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.