Shopware · OAuth Scopes

Shopware OAuth Scopes

OAuth 2.0 derived

Shopware publishes 1 OAuth 2.0 scope via the clientCredentials and password flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Shopware API on a user’s behalf.

Tokens are issued from /api/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

E-CommerceOpen SourceHeadless CommerceB2BB2CRESTOAuth2
Scopes: 1 Flows: clientCredentials, password Method: derived

OAuth endpoints

Token URL
/api/oauth/token
Flows
clientCredentialspassword

Scopes (1)

ScopeDescriptionFlows
write:all Full write access to all Admin API resources clientCredentials, password

Source

OAuth Scopes

shopware-scopes.yml Raw ↑
generated: '2026-07-11'
method: derived
source: openapi/shopware-admin-api-openapi.yml
schemes:
- name: oAuth2
  source: openapi/shopware-admin-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: /api/oauth/token
  - flow: password
    tokenUrl: /api/oauth/token
scopes:
- scope: write:all
  description: Full write access to all Admin API resources
  flows:
  - clientCredentials
  - password
  sources:
  - openapi/shopware-admin-api-openapi.yml