Permissions
Scopes attach to credentials at issue time. Changing a scope takes effect on the next token exchange.
Payments
payments:readRead payment intents, charges and refunds.
payments:write sensitive
Create and capture payments, issue refunds.
payouts:write sensitive
Initiate disbursements to external accounts.
Customers
customers:readRead customer profiles and stored methods.
customers:write sensitive
Create or update customer records.
Webhooks
webhooks:manageRegister, edit and replay webhook endpoints.
Reporting
reports:readDownload settlement and reconciliation reports.
Admin
team:manage sensitive
Invite teammates and change portal roles.
Team roles
Owner
1
Full access, billing, key revocation
Developer
4
Create apps, rotate sandbox keys, read logs
Read-only
7
View dashboards, usage and documentation