Virto Commerce · OAuth Scopes

Virto Commerce OAuth Scopes

OAuth 2.0 derived

Virto Commerce publishes 72 OAuth 2.0 scopes via the password and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Virto Commerce API on a user’s behalf.

Tokens are issued from /connect/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

B2B E-CommerceCatalog ManagementOrder ManagementPricingInventoryShopping CartCustomer ManagementMarketingPaymentsShippingSubscriptionsHeadless CommerceOpen Source.NET

Scopes: 72 Flows: password, clientCredentials Method: derived

OAuth endpoints

Token URL
/connect/token

Flows
passwordclientCredentials

Scopes (72)

Scope	Description	Flows
background_jobs:manage
cache:reset
cart:create
cart:delete
cart:read
cart:update
catalog:access
catalog:configurations:read
catalog:configurations:update
catalog:create
catalog:delete
catalog:dictionary-property:edit
catalog:read
catalog:update
customer:create
customer:delete
customer:invite
customer:read
customer:update
inventory:fulfillment:delete
inventory:fulfillment:edit
inventory:fulfillment:read
inventory:read
inventory:update
marketing:create
marketing:delete
marketing:read
marketing:update
measures:access
measures:create
measures:delete
measures:read
measures:update
order:capture_payment
order:create
order:dashboardstatistics:view
order:payment:execute_callback
order:refund
order:update_shipments
platform:developer-tools:access
platform:dynamic_properties:create
platform:dynamic_properties:delete
platform:dynamic_properties:read
platform:dynamic_properties:update
platform:module:manage
platform:module:read
platform:security:confirmEmail
platform:security:create
platform:security:delete
platform:security:generateToken
platform:security:oauth_applications:create
platform:security:oauth_applications:delete
platform:security:oauth_applications:read
platform:security:oauth_applications:update
platform:security:read
platform:security:revokeToken
platform:security:update
platform:security:verifyEmail
platform:security:verifyToken
platform:setting:read
platform:setting:update
pricing:create
pricing:delete
pricing:read
pricing:update
quote:create
quote:delete
quote:read
quote:update
store:create
store:read
store:update

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/virto-commerce-cart-openapi.json, openapi/virto-commerce-catalog-openapi.json,
  openapi/virto-commerce-customer-openapi.json, openapi/virto-commerce-inventory-openapi.json,
  openapi/virto-commerce-marketing-openapi.json, openapi/virto-commerce-orders-openapi.json,
  openapi/virto-commerce-platform-openapi.json, openapi/virto-commerce-pricing-openapi.json,
  openapi/virto-commerce-quote-openapi.json, openapi/virto-commerce-store-openapi.json
schemes:
- name: oauth2
  source: openapi/virto-commerce-cart-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-catalog-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-customer-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-inventory-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-marketing-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-orders-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-platform-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-pricing-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-quote-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
- name: oauth2
  source: openapi/virto-commerce-store-openapi.json
  flows:
  - flow: password
    tokenUrl: /connect/token
  - flow: clientCredentials
    tokenUrl: /connect/token
  description: OAuth2 Resource Owner Password Grant flow
scopes:
- scope: background_jobs:manage
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: cache:reset
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: cart:create
  sources:
  - openapi/virto-commerce-cart-openapi.json
- scope: cart:delete
  sources:
  - openapi/virto-commerce-cart-openapi.json
- scope: cart:read
  sources:
  - openapi/virto-commerce-cart-openapi.json
- scope: cart:update
  sources:
  - openapi/virto-commerce-cart-openapi.json
- scope: catalog:access
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:configurations:read
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:configurations:update
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:create
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:delete
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:dictionary-property:edit
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:read
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: catalog:update
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: customer:create
  sources:
  - openapi/virto-commerce-customer-openapi.json
- scope: customer:delete
  sources:
  - openapi/virto-commerce-customer-openapi.json
- scope: customer:invite
  sources:
  - openapi/virto-commerce-customer-openapi.json
- scope: customer:read
  sources:
  - openapi/virto-commerce-customer-openapi.json
- scope: customer:update
  sources:
  - openapi/virto-commerce-customer-openapi.json
- scope: inventory:fulfillment:delete
  sources:
  - openapi/virto-commerce-inventory-openapi.json
- scope: inventory:fulfillment:edit
  sources:
  - openapi/virto-commerce-inventory-openapi.json
- scope: inventory:fulfillment:read
  sources:
  - openapi/virto-commerce-inventory-openapi.json
- scope: inventory:read
  sources:
  - openapi/virto-commerce-inventory-openapi.json
- scope: inventory:update
  sources:
  - openapi/virto-commerce-inventory-openapi.json
- scope: marketing:create
  sources:
  - openapi/virto-commerce-marketing-openapi.json
- scope: marketing:delete
  sources:
  - openapi/virto-commerce-marketing-openapi.json
- scope: marketing:read
  sources:
  - openapi/virto-commerce-marketing-openapi.json
- scope: marketing:update
  sources:
  - openapi/virto-commerce-marketing-openapi.json
- scope: measures:access
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: measures:create
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: measures:delete
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: measures:read
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: measures:update
  sources:
  - openapi/virto-commerce-catalog-openapi.json
- scope: order:capture_payment
  sources:
  - openapi/virto-commerce-orders-openapi.json
- scope: order:create
  sources:
  - openapi/virto-commerce-orders-openapi.json
  - openapi/virto-commerce-quote-openapi.json
- scope: order:dashboardstatistics:view
  sources:
  - openapi/virto-commerce-orders-openapi.json
- scope: order:payment:execute_callback
  sources:
  - openapi/virto-commerce-orders-openapi.json
- scope: order:refund
  sources:
  - openapi/virto-commerce-orders-openapi.json
- scope: order:update_shipments
  sources:
  - openapi/virto-commerce-orders-openapi.json
- scope: platform:developer-tools:access
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:dynamic_properties:create
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:dynamic_properties:delete
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:dynamic_properties:read
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:dynamic_properties:update
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:module:manage
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:module:read
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:confirmEmail
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:create
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:delete
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:generateToken
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:oauth_applications:create
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:oauth_applications:delete
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:oauth_applications:read
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:oauth_applications:update
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:read
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:revokeToken
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:update
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:verifyEmail
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:security:verifyToken
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:setting:read
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: platform:setting:update
  sources:
  - openapi/virto-commerce-platform-openapi.json
- scope: pricing:create
  sources:
  - openapi/virto-commerce-pricing-openapi.json
- scope: pricing:delete
  sources:
  - openapi/virto-commerce-pricing-openapi.json
- scope: pricing:read
  sources:
  - openapi/virto-commerce-pricing-openapi.json
- scope: pricing:update
  sources:
  - openapi/virto-commerce-pricing-openapi.json
- scope: quote:create
  sources:
  - openapi/virto-commerce-quote-openapi.json
- scope: quote:delete
  sources:
  - openapi/virto-commerce-quote-openapi.json
- scope: quote:read
  sources:
  - openapi/virto-commerce-quote-openapi.json
- scope: quote:update
  sources:
  - openapi/virto-commerce-quote-openapi.json
- scope: store:create
  sources:
  - openapi/virto-commerce-store-openapi.json
- scope: store:read
  sources:
  - openapi/virto-commerce-store-openapi.json
- scope: store:update
  sources:
  - openapi/virto-commerce-store-openapi.json