Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.fluveo.com/llms.txt

Use this file to discover all available pages before exploring further.

OAuth scopes control what data and operations an app can access on behalf of a merchant. When a merchant installs your app, they grant a subset of the scopes your app declares. Your app can only access endpoints protected by the granted scopes.

How scopes work

  1. Developer declares scopes — When registering an app, you list the scopes your app needs in requested_scopes.
  2. Merchant grants scopes — During the OAuth flow, the merchant sees the requested scopes and can approve them.
  3. API enforces scopes — Each API endpoint requires a specific scope. Requests without the required scope receive a 403 error.

Scope naming convention

Scopes follow the pattern {action}_{resource}:
  • read_ scopes grant read-only access (GET endpoints)
  • write_ scopes grant create, update, and delete access (POST, PATCH, DELETE endpoints)
A write_ scope does not automatically include read_ access. If your app needs to both read and write a resource, request both scopes.

Payments

ScopeAccess
read_paymentsList and retrieve PaymentIntents
write_paymentsCreate, confirm, capture, and cancel PaymentIntents

Customers

ScopeAccess
read_customersList and retrieve Customers
write_customersCreate and update Customers

Refunds

ScopeAccess
read_refundsList and retrieve Refunds
write_refundsCreate Refunds

Products

ScopeAccess
read_productsList and retrieve Products and Variants
write_productsCreate, update, and delete Products and Variants

Prices

ScopeAccess
read_pricesList and retrieve Prices
write_pricesCreate and update Prices

Orders

ScopeAccess
read_ordersList and retrieve Orders
write_ordersCreate, update, cancel, and complete Orders

Fulfillments

ScopeAccess
read_fulfillmentsList and retrieve Fulfillments
write_fulfillmentsCreate, ship, deliver, and cancel Fulfillments

Inventory

ScopeAccess
read_inventoryList and retrieve Inventory Levels and adjustments
write_inventorySet, adjust, and transfer Inventory Levels

Collections

ScopeAccess
read_collectionsList and retrieve Collections
write_collectionsCreate, update, delete Collections and manage collection products

Promotions

ScopeAccess
read_promotionsList and retrieve Promotions
write_promotionsCreate, update, and delete Promotions

Carts

ScopeAccess
read_cartsRetrieve Carts
write_cartsCreate Carts, add/update/remove line items, and complete Carts

Checkout Sessions

ScopeAccess
read_checkout_sessionsList and retrieve Checkout Sessions
write_checkout_sessionsCreate and expire Checkout Sessions
ScopeAccess
read_checkout_linksList and retrieve Checkout Links
write_checkout_linksCreate and update Checkout Links

Webhook Endpoints

ScopeAccess
read_webhook_endpointsList and retrieve Webhook Endpoints and deliveries
write_webhook_endpointsCreate, update, delete, and test Webhook Endpoints; rotate secrets

Events

ScopeAccess
read_eventsList and retrieve Events and Event Types
write_eventsRetry Event deliveries

Balance & Payouts

ScopeAccess
read_balanceRetrieve Balance, list Balance Transactions, Transfers, and Settlement batches
write_payoutsCreate and cancel Payouts
read_payoutsList and retrieve Payouts

Choosing scopes

Request only the scopes your app actually needs. Apps requesting overly broad scopes are more likely to be rejected during review and less likely to be installed by merchants.
Principle of least privilege — If your app only reads product data to display analytics, request read_products only. Do not request write_products unless you need to modify products.

Next steps