> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qonto.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Scopes & endpoint access

> Which authentication methods and OAuth scopes each Business API endpoint accepts, which scopes are sensitive, and how to choose them.

> **Need the authentication method or the OAuth scope required for an endpoint?** Check the [endpoints access](#endpoints-access) table. Every endpoint page also shows it right below its method and URL.

OAuth scopes define what your application is allowed to do on behalf of a Qonto user. When a user connects their account, they see a consent screen listing the exact permissions your application is requesting. Only request the scopes you actually need.

> [!NOTE]
>
> **Building a new integration?** Before selecting scopes, make sure you've chosen the right [use case for your application](https://docs.qonto.com/guides/developer-portal/developer-guidelines.md#selecting-your-use-case). If your integration uses [sensitive scopes](https://docs.qonto.com/guides/developer-portal/developer-guidelines.md#sensitive-scopes), check the approval requirements by use case before going to production.

## Scope selection guidance

### Do you need `organization.read`?

`organization.read` is one of the most commonly requested scopes, but also the most broad. Before requesting it, consider whether a narrower scope covers your actual need:

| If you need to... | Use this scope instead |
| - | - |
| Download supplier or client invoice PDFs | `attachment.read` — see workaround below |
| Read a user's personal identity and role | `membership.read` |
| List all members of an organization | `organization.read` is required — `membership.read` only retrieves the authenticated user's own membership |
| List transactions | `organization.read` is required |
| Access balances or IBANs | `organization.read` is required |
| Check the organization's current subscription plan | `subscription.read` |

### Do you need `beneficiary.trust` or `payment.write` for beneficiary management?

These two scopes cover different sides of SEPA beneficiary trust management and are often needed together:

| If you need to... | Use this scope |
| - | - |
| Mark a beneficiary as trusted (to enable automated transfers without SCA) | `beneficiary.trust` — Automate your business operations and Embed use cases only |
| Untrust a beneficiary | `payment.write` |
| Both trust and untrust beneficiaries | Request both scopes |

> [!NOTE]
>
> Trusting a beneficiary lets your integration initiate transfers to that beneficiary without requiring SCA on every transaction. The actual transfer still requires `payment.write`.

### Fetching invoice PDFs without `organization.read`

If your only requirement is downloading supplier or client invoice PDFs, you can avoid the sensitive `organization.read` scope entirely by using `attachment.read`.

**How it works:**

1. Fetch the supplier invoice ([`supplier_invoice.read`](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/retrieve-a-supplier-invoice)) or client invoice ([`client_invoices.read`](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/retrieve-a-client-invoice)). The response includes an `attachment_id` field.
2. Call `GET /v2/attachments/{id}` using the `attachment.read` scope.
3. The response includes a pre-signed `url` you can use to download the PDF directly.

> [!NOTE]
>
> This approach only works when fetching invoice PDFs is your sole need. If you also need transaction data, account balances, or organization details, `organization.read` is still required.

> [!NOTE]
>
> For client invoices in Factur-X format, the PDF may need to be regenerated before download. If the `url` is not immediately available in the response, retry the request after a short delay. [Learn more](https://docs.qonto.com/guides/invoicing/factur-x.md)

## Endpoints access

Generated from the OpenAPI `security` field of every published Business API operation. **API key** and **OAuth 2.0** show which authentication methods the endpoint accepts; **Scope(s)** are the OAuth scopes the access token needs; a **Sensitive** tag marks endpoints that need a [sensitive scope](https://docs.qonto.com/guides/developer-portal/developer-guidelines.md#sensitive-scopes).

| Endpoint | API key | OAuth 2.0 | Scope(s) |
| - | :-: | :-: | - |
| [Retrieve an authorization code](https://docs.qonto.com/api-reference/business-api/authentication/oauth2/retrieve_authorization.md) `GET /oauth2/auth` | | | — |
| [Create or refresh tokens](https://docs.qonto.com/api-reference/business-api/authentication/oauth2/create_tokens.md) `POST /oauth2/token` | | | — |
| [Revoke consents](https://docs.qonto.com/api-reference/business-api/authentication/oauth2/revoke-oauth-consents.md) `DELETE /v2/oauth2/consents` Sensitive | | | `organization.read` |
| [Retrieve SCA session](https://docs.qonto.com/api-reference/business-api/authentication/sca/retrieve-session.md) `GET /v2/sca_sessions/{sca-session-token}` | | | — |
| [Retrieve mocked SCA session](https://docs.qonto.com/api-reference/business-api/authentication/sca/retrieve-mocked-session.md) `GET /v2/mocked_sca_sessions/{sca-session-token}` | | | — |
| [Simulate user decision](https://docs.qonto.com/api-reference/business-api/authentication/sca/simulate-user-decision.md) `POST /v2/mocked_sca_sessions/{sca-session-token}/{decision}` | | | — |
| [Retrieve the authenticated organization and list bank accounts](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/retrieve-the-authenticated-organization-and-list-bank-accounts.md) `GET /v2/organization` Sensitive | | | `organization.read` |
| [Get user organizations](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/get-user-organizations.md) `GET /v2/user_organizations` | | | `user_organization.read` |
| [Show organization (v2 · deprecated)](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/show-organization.md) *(deprecated)* `GET /v2/organizations/{slug}` Sensitive | | | `organization.read` |
| [Show organization (v1 · deprecated)](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/show-organization-v1.md) *(deprecated)* `GET /v1/organizations/{slug}` Sensitive | | | `organization.read` |
| [List business accounts](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/list.md) `GET /v2/bank_accounts` Sensitive | | | `organization.read` |
| [Get a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/show.md) `GET /v2/bank_accounts/{id}` Sensitive | | | `organization.read` |
| [Close a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/close.md) `POST /v2/bank_accounts/{id}/close` | | | `bank_account.write` |
| [Create a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/create.md) `POST /v2/bank_accounts` | | | `bank_account.write` |
| [Update a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/update.md) `PATCH /v2/bank_accounts/{id}` | | | `bank_account.write` |
| [Download the IBAN certificate](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/download-iban-certificate.md) `GET /v2/bank_accounts/{id}/iban_certificate` Sensitive | | | `organization.read` |
| [List memberships](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/list-memberships.md) `GET /v2/memberships` Sensitive | | | `organization.read` |
| [Retrieve the authenticated membership](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/retrieve-the-authenticated-membership.md) `GET /v2/membership` | | | `membership.read` |
| [Create a membership](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/create-a-membership.md) `POST /v2/memberships/invite_employee_or_accountant` | | | `membership.write` |
| [List teams](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/list-teams.md) `GET /v2/teams` | | | `team.read` |
| [Create a team](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/create-a-team.md) `POST /v2/teams` | | | `team.write` |
| [Update a team](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/update-a-team.md) `PATCH /v2/teams/{id}` | | | `team.write` |
| [List labels](https://docs.qonto.com/api-reference/business-api/organization-accounts/labels/list-labels.md) `GET /v2/labels` Sensitive | | | `organization.read` |
| [Retrieve a label](https://docs.qonto.com/api-reference/business-api/organization-accounts/labels/retrieve-a-label.md) `GET /v2/labels/{id}` Sensitive | | | `organization.read` |
| [Retrieve the organization's current subscription plan](https://docs.qonto.com/api-reference/business-api/organization-accounts/subscription/get-subscription.md) `GET /v2/subscription` | | | `subscription.read` |
| [List transactions](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/list-transactions.md) `GET /v2/transactions` Sensitive | | | `organization.read` |
| [Retrieve a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/retrieve-a-transaction.md) `GET /v2/transactions/{id}` Sensitive | | | `organization.read` |
| [List child transaction links](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/list-child-transaction-links.md) `GET /v2/transactions/{id}/child_transaction_links` Sensitive | | | `organization.read` |
| [List statements](https://docs.qonto.com/api-reference/business-api/transactions-statements/statements/list-statements.md) `GET /v2/statements` Sensitive | | | `organization.read` |
| [Retrieve a statement](https://docs.qonto.com/api-reference/business-api/transactions-statements/statements/retrieve-a-statement.md) `GET /v2/statements/{id}` Sensitive | | | `organization.read` |
| [Retrieve an attachment](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments/retrieve-an-attachment.md) `GET /v2/attachments/{id}` Sensitive | | | `organization.read` |
| [Upload an attachment](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments/upload-an-attachment.md) `POST /v2/attachments` | | | `attachment.write` |
| [List attachments for a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/list-attachments-for-a-transaction.md) `GET /v2/transactions/{id}/attachments` Sensitive | | | `organization.read` |
| [Upload an attachment to a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/upload-an-attachment-to-a-transaction.md) `POST /v2/transactions/{id}/attachments` | | | `attachment.write` |
| [Remove an attachment from a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/remove-an-attachment-from-a-transaction.md) `DELETE /v2/transactions/{transaction_id}/attachments/{attachment_id}` | | | `attachment.write` |
| [Remove all attachments from a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/remove-all-attachments-from-a-transaction.md) `DELETE /v2/transactions/{id}/attachments` | | | `attachment.write` |
| [List SEPA transfers](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/index.md) `GET /v2/sepa/transfers` Sensitive | | | `organization.read` |
| [Get SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/show.md) `GET /v2/sepa/transfers/{id}` Sensitive | | | `organization.read` |
| [Create a SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/create.md) `POST /v2/sepa/transfers` Sensitive | | | `payment.write` |
| [Download proof of a SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/download-proof.md) `POST /v2/sepa/transfers/{id}/download_proof` Sensitive | | | `payment.write` |
| [Cancel SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/cancel.md) `POST /v2/sepa/transfers/{id}/cancel` Sensitive | | | `payment.write` |
| [List SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/index.md) `GET /v2/sepa/beneficiaries` Sensitive | | | `organization.read` |
| [Retrieve a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/show.md) `GET /v2/sepa/beneficiaries/{id}` Sensitive | | | `organization.read` |
| [Add a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/create.md) `POST /v2/sepa/beneficiaries` Sensitive | | | `payment.write` |
| [Update a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/update.md) `PATCH /v2/sepa/beneficiaries/{id}` Sensitive | | | `payment.write` |
| [Delete a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/delete.md) `DELETE /v2/sepa/beneficiaries/{id}` Sensitive | | | `payment.write` |
| [Trust SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/trust.md) `PATCH /v2/sepa/beneficiaries/trust` Sensitive | | | `beneficiary.trust` |
| [Untrust SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/untrust.md) `PATCH /v2/sepa/beneficiaries/untrust` Sensitive | | | `payment.write` |
| [Verify a SEPA payee](https://docs.qonto.com/api-reference/business-api/transfers/verification-of-payee/index.md) `POST /v2/sepa/verify_payee` Sensitive | | | `payment.write` |
| [Bulk verify SEPA payees](https://docs.qonto.com/api-reference/business-api/transfers/verification-of-payee/bulk-verify-payee.md) `POST /v2/sepa/bulk_verify_payee` Sensitive | | | `payment.write` |
| [List Bulk Transfers](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/index.md) `GET /v2/sepa/bulk_transfers` Sensitive | | | `organization.read` |
| [Get Bulk Transfer](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/show.md) `GET /v2/sepa/bulk_transfers/{id}` Sensitive | | | `organization.read` |
| [Create a Bulk Transfer](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/create.md) `POST /v2/sepa/bulk_transfers` Sensitive | | | `payment.write` |
| [List SEPA recurring transfers](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/index.md) `GET /v2/sepa/recurring_transfers` Sensitive | | | `organization.read` |
| [Get SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/show.md) `GET /v2/sepa/recurring_transfers/{id}` Sensitive | | | `organization.read` |
| [Create a SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/create.md) `POST /v2/sepa/recurring_transfers` Sensitive | | | `payment.write` |
| [Cancel SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/cancel.md) `POST /v2/sepa/recurring_transfers/{id}/cancel` Sensitive | | | `payment.write` |
| [Create an internal transfer](https://docs.qonto.com/api-reference/business-api/transfers/internal-transfers/create-an-internal-transfer.md) `POST /v2/internal_transfers` Sensitive | | | `internal_transfer.write` |
| [Check if the organization is eligible for international transfers](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/check-eligibility.md) `GET /v2/international/eligibility` Sensitive | | | `organization.read` |
| [Get available currencies for international transfers](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-available-currencies.md) `GET /v2/international/currencies` Sensitive | | | `organization.read` |
| [Create a new international transfer quote](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-international-quote.md) `POST /v2/international/quotes` Sensitive | | | `international_transfer.write` |
| [List international beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-beneficiaries-by-currency.md) `GET /v2/international/beneficiaries` Sensitive | | | `organization.read` |
| [List requirements for an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-beneficiary-requirements.md) `POST /v2/international/beneficiaries/requirements` Sensitive | | | `international_transfer.write` |
| [Create an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-beneficiary.md) `POST /v2/international/beneficiaries` Sensitive | | | `international_transfer.write` |
| [Update an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/update-beneficiary.md) `PUT /v2/international/beneficiaries/{id}` Sensitive | | | `international_transfer.write` |
| [Delete an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/delete-beneficiary.md) `DELETE /v2/international/beneficiaries/{id}` Sensitive | | | `international_transfer.write` |
| [List international transfer requirements](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-transfer-requirements.md) `POST /v2/international/transfers/requirements` Sensitive | | | `international_transfer.write` |
| [Create an international transfer](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-international-transfer.md) `POST /v2/international/transfers` Sensitive | | | `international_transfer.write` |
| [List payment links](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index.md) `GET /v2/payment_links` | | | `payment_link.read` |
| [Get a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/show.md) `GET /v2/payment_links/{id}` | | | `payment_link.read` |
| [Create a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/create.md) `POST /v2/payment_links` | | | `payment_link.write` |
| [Deactivate a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/deactivate.md) `PATCH /v2/payment_links/{id}/deactivate` | | | `payment_link.write` |
| [List payments for a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index-payments.md) `GET /v2/payment_links/{id}/payments` | | | `payment_link.read` |
| [List available payment methods](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index-payment-methods.md) `GET /v2/payment_links/payment_methods` | | | `payment_link.read` |
| [Connect to the payment links provider](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/connect.md) `POST /v2/payment_links/connections` | | | `payment_link.write` |
| [Get the connection status](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/get-connection.md) `GET /v2/payment_links/connections` | | | `payment_link.read` |
| [List terminals](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/list-terminals.md) `GET /v2/terminals` | | | `terminal.read` |
| [Create a terminal payment](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/create-terminal-payment.md) `POST /v2/terminals/{id}/payment` | | | `terminal.write` |
| [Get a terminal payment](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/get-terminal-payment.md) `GET /v2/terminal_payments/{id}` | | | `terminal.read` |
| [List SEPA Direct Debit mandates](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/index.md) `GET /v2/sepa/direct_debit_mandates` | | | `sepa_direct_debit.read` |
| [Get a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/show.md) `GET /v2/sepa/direct_debit_mandates/{direct_debit_mandate_id}` | | | `sepa_direct_debit.read` |
| [Create a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/create.md) `POST /v2/sepa/direct_debit_mandates` | | | `sepa_direct_debit.write` |
| [Cancel a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/cancel.md) `POST /v2/sepa/direct_debit_mandates/{direct_debit_mandate_id}/cancel` | | | `sepa_direct_debit.write` |
| [List SEPA Direct Debit subscriptions](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/index.md) `GET /v2/sepa/direct_debit_subscriptions` | | | `sepa_direct_debit.read` |
| [Get a SEPA Direct Debit subscription](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/show.md) `GET /v2/sepa/direct_debit_subscriptions/{direct_debit_subscription_id}` | | | `sepa_direct_debit.read` |
| [Create a SEPA Direct Debit subscription](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/create.md) `POST /v2/sepa/direct_debit_subscriptions` | | | `sepa_direct_debit.write` |
| [List SEPA Direct Debit collections](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/collections/index.md) `GET /v2/sepa/direct_debit_collections` | | | `sepa_direct_debit.read` |
| [Get a SEPA Direct Debit collection](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/collections/show.md) `GET /v2/sepa/direct_debit_collections/{direct_debit_collection_id}` | | | `sepa_direct_debit.read` |
| [List cards](https://docs.qonto.com/api-reference/business-api/cards/list-cards.md) `GET /v2/cards` | | | `card.read` |
| [List card appearances](https://docs.qonto.com/api-reference/business-api/cards/list-appearances.md) `GET /v2/cards/appearances` | | | `card.read` |
| [Retrieve a card iframe url](https://docs.qonto.com/api-reference/business-api/cards/retrieve-a-card-iframe-url.md) `GET /v2/cards/{id}/data_view` | | | `card.read` |
| [Create a card](https://docs.qonto.com/api-reference/business-api/cards/create-a-card.md) `POST /v2/cards` | | | `card.write` |
| [Bulk create cards](https://docs.qonto.com/api-reference/business-api/cards/bulk-create-cards.md) `POST /v2/cards_bulk` | | | `card.write` |
| [Update a card's limits](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-limits.md) `PATCH /v2/cards/{id}/limits` | | | `card.write` |
| [Update a card's nickname](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-nickname.md) `PATCH /v2/cards/{id}/nickname` | | | `card.write` |
| [Update a card's options](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-options.md) `PATCH /v2/cards/{id}/options` | | | `card.write` |
| [Update a card's restrictions](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-restrictions.md) `PATCH /v2/cards/{id}/restrictions` | | | `card.write` |
| [Lock a card](https://docs.qonto.com/api-reference/business-api/cards/lock-a-card.md) `PUT /v2/cards/{id}/lock` | | | `card.write` |
| [Unlock a card](https://docs.qonto.com/api-reference/business-api/cards/unlock-a-card.md) `PUT /v2/cards/{id}/unlock` | | | `card.write` |
| [Report a physical card as lost](https://docs.qonto.com/api-reference/business-api/cards/report-a-physical-card-as-lost.md) `PUT /v2/cards/{id}/lost` | | | `card.write` |
| [Report a physical card as stolen](https://docs.qonto.com/api-reference/business-api/cards/report-a-physical-card-as-stolen.md) `PUT /v2/cards/{id}/stolen` | | | `card.write` |
| [Discard a card](https://docs.qonto.com/api-reference/business-api/cards/discard-a-card.md) `PUT /v2/cards/{id}/discard` | | | `card.write` |
| [List clients](https://docs.qonto.com/api-reference/business-api/invoicing/clients/list-clients.md) `GET /v2/clients` | | | `client.read` |
| [Retrieve a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/retrieve-a-client.md) `GET /v2/clients/{id}` | | | `client.read` |
| [Create a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/create-a-client.md) `POST /v2/clients` | | | `client.write` |
| [Update a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/update-a-client.md) `PATCH /v2/clients/{id}` | | | `client.write` |
| [Delete a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/delete-a-client.md) `DELETE /v2/clients/{id}` | | | `client.write` |
| [List products](https://docs.qonto.com/api-reference/business-api/invoicing/products/list-products.md) `GET /v2/products` | | | `product.read` |
| [Retrieve a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/retrieve-a-product.md) `GET /v2/products/{id}` | | | `product.read` |
| [Create a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/create-a-product.md) `POST /v2/products` | | | `product.write` |
| [Delete a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/delete-a-product.md) `DELETE /v2/products/{id}` | | | `product.write` |
| [List client invoices](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/list-client-invoices.md) `GET /v2/client_invoices` | | | `client_invoices.read` |
| [Retrieve a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/retrieve-a-client-invoice.md) `GET /v2/client_invoices/{id}` | | | `client_invoices.read` |
| [Create a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/create-a-client-invoice.md) `POST /v2/client_invoices` | | | `client_invoice.write` |
| [Update a draft client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/update-a-client-invoice.md) `PATCH /v2/client_invoices/{id}` | | | `client_invoice.write` |
| [Delete a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/delete-a-client-invoice.md) `DELETE /v2/client_invoices/{id}` | | | `client_invoice.write` |
| [Finalize a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/finalize-a-client-invoice.md) `POST /v2/client_invoices/{id}/finalize` | | | `client_invoice.write` |
| [Send a client invoice via email](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/send-a-client-invoice.md) `POST /v2/client_invoices/{id}/send` | | | `client_invoice.write` |
| [Send a client invoice via e-invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/send-a-client-invoice-by-e-invoice.md) `POST /v2/client_invoices/{id}/send_by_einvoice` | | | `client_invoice.write` |
| [Mark a client invoice as paid](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/mark-a-client-invoice-as-paid.md) `POST /v2/client_invoices/{id}/mark_as_paid` | | | `client_invoice.write` |
| [Unmark a client invoice as paid](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/unmark-a-client-invoice-as-paid.md) `POST /v2/client_invoices/{id}/unmark_as_paid` | | | `client_invoice.write` |
| [Cancel a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/mark-a-client-invoice-as-canceled.md) `POST /v2/client_invoices/{id}/mark_as_canceled` | | | `client_invoice.write` |
| [Import client invoices in bulk](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/bulk-import-client-invoices.md) `POST /v2/client_invoices/bulk` | | | `client_invoice.write` |
| [Create a client invoice upload](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/create-a-client-invoice-upload.md) `POST /v2/client_invoices/uploads` | | | `client_invoice.write` |
| [Retrieve a client invoice upload](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/retrieve-a-client-invoice-upload.md) `GET /v2/client_invoices/uploads/{id}` | | | `client_invoices.read` |
| [List quotes](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/list-quotes.md) `GET /v2/quotes` | | | `client_invoices.read` |
| [Retrieve a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/retrieve-a-quote.md) `GET /v2/quotes/{id}` | | | `client_invoices.read` |
| [Create a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/create-a-quote.md) `POST /v2/quotes` | | | `client_invoice.write` |
| [Update a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/patch-a-quote.md) `PATCH /v2/quotes/{id}` | | | `client_invoice.write` |
| [Delete a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/delete-a-quote.md) `DELETE /v2/quotes/{id}` | | | `client_invoice.write` |
| [Send a quote via email](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/send-a-quote.md) `POST /v2/quotes/{id}/send` | | | `client_invoice.write` |
| [List credit notes](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/list-credit-notes.md) `GET /v2/credit_notes` | | | `client_invoices.read` |
| [Retrieve a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/retrieve-a-credit-note.md) `GET /v2/credit_notes/{id}` | | | `client_invoices.read` |
| [Create a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/create-a-credit-note.md) `POST /v2/credit_notes` | | | `client_invoice.write` |
| [Download a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/download-a-credit-note.md) `GET /v2/credit_notes/{credit_note_id}/file` | | | `client_invoices.read` |
| [List recurring invoices](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/list-recurring-invoices.md) `GET /v2/recurring_invoices` | | | `client_invoices.read` |
| [Retrieve a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/retrieve-a-recurring-invoice.md) `GET /v2/recurring_invoices/{id}` | | | `client_invoices.read` |
| [Create a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/create-a-recurring-invoice.md) `POST /v2/recurring_invoices` | | | `client_invoice.write` |
| [Update a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/update-a-recurring-invoice.md) `PUT /v2/recurring_invoices/{id}` | | | `client_invoice.write` |
| [Cancel a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/cancel-a-recurring-invoice.md) `POST /v2/recurring_invoices/{id}/cancel` | | | `client_invoice.write` |
| [Reactivate a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/reactivate-a-recurring-invoice.md) `POST /v2/recurring_invoices/{id}/reactivate` | | | `client_invoice.write` |
| [Suspend a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/suspend-a-recurring-invoice.md) `POST /v2/recurring_invoices/{id}/suspend` | | | `client_invoice.write` |
| [Validate a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/validate-a-recurring-invoice.md) `POST /v2/recurring_invoices/validate` | | | `client_invoice.write` |
| [List payment reminder configurations](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/list-reminders.md) `GET /v2/reminders` | | | `client_invoices.read` |
| [Get a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/retrieve-a-reminder.md) `GET /v2/reminders/{id}` | | | `client_invoices.read` |
| [Configure payment reminders for a client](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/create-a-reminder.md) `POST /v2/reminders` | | | `client_invoice.write` |
| [Replace a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/update-a-reminder.md) `PUT /v2/reminders/{id}` | | | `client_invoice.write` |
| [Delete a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/delete-a-reminder.md) `DELETE /v2/reminders/{id}` | | | `client_invoice.write` |
| [Get invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/settings/retrieve-settings.md) `GET /v2/settings` | | | `client_invoices.read` |
| [Update invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/settings/update-settings.md) `PUT /v2/settings` | | | `client_invoice.write` |
| [Get e-invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/e-invoicing-settings/retrieve-settings.md) `GET /v2/einvoicing/settings` | | | `einvoicing.read` |
| [Search suppliers](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/search-suppliers.md) `POST /v2/suppliers/search` | | | `supplier_invoice.read` |
| [Retrieve a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/retrieve-a-supplier.md) `GET /v2/suppliers/{id}` | | | `supplier_invoice.read` |
| [Create a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/create-supplier.md) `POST /v2/suppliers` | | | `supplier_invoice.write` |
| [Update a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/update-supplier.md) `PUT /v2/suppliers/{id}` | | | `supplier_invoice.write` |
| [List supplier invoices](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/list-supplier-invoices.md) `GET /v2/supplier_invoices` | | | `supplier_invoice.read` |
| [Retrieve a supplier invoice](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/retrieve-a-supplier-invoice.md) `GET /v2/supplier_invoices/{id}` | | | `supplier_invoice.read` |
| [Create supplier invoices](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/create-supplier-invoices.md) `POST /v2/supplier_invoices/bulk` | | | `supplier_invoice.write` |
| [Mark a supplier invoice as paid](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/mark-supplier-invoice-as-paid.md) `POST /v2/supplier_invoices/{id}/mark_as_paid` | | | `supplier_invoice.write` |
| [Reject a supplier invoice](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/reject-supplier-invoice.md) `POST /v2/supplier_invoices/{id}/reject` | | | `supplier_invoice.write` |
| [Unmark a supplier invoice as paid](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/unmark-supplier-invoice-as-paid.md) `POST /v2/supplier_invoices/{id}/unmark_as_paid` | | | `supplier_invoice.write` |
| [List requests](https://docs.qonto.com/api-reference/business-api/spend-management/requests/list-requests.md) `GET /v2/requests` Sensitive | | | `organization.read` |
| [Create transfer request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-transfer-request.md) `POST /v2/requests/transfers` | | | `request_transfers.write` |
| [Create multi transfer request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-multi-transfer-request.md) `POST /v2/requests/multi_transfers` | | | `request_transfers.write` |
| [Create a flash card request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-a-flash-card-request.md) `POST /v2/requests/flash_cards` | | | *none declared* |
| [Create a virtual card request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-a-virtual-card-request.md) `POST /v2/requests/virtual_cards` | | | *none declared* |
| [Approve a request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/approve-a-request.md) `POST /v2/requests/{request_type}/{id}/approve` | | | `request_review.write` |
| [Decline a request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/decline-a-request.md) `POST /v2/requests/{request_type}/{id}/decline` | | | `request_review.write` |
| [Retrieve an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/retrieve-an-insurance-contract.md) `GET /v2/insurance_contracts/{id}` | | | `insurance_contract.read` |
| [Create an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/create-an-insurance-contract.md) `POST /v2/insurance_contracts` | | | `insurance_contract.write` |
| [Update an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/update-an-insurance-contract.md) `PATCH /v2/insurance_contracts/{id}` | | | `insurance_contract.write` |
| [Upload a document to an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/upload-a-document-to-an-insurance-contract.md) `POST /v2/insurance_contracts/{id}/attachments` | | | `insurance_contract.write` |
| [Remove a document from an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/remove-a-document-from-an-insurance-contract.md) `DELETE /v2/insurance_contracts/{id}/attachments/{attachment_id}` | | | `insurance_contract.write` |
| [List cash flow categories](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/list.md) `GET /v2/cash_flow_categories` | | | `cash_flow_category.read` |
| [Create a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/create.md) `POST /v2/cash_flow_categories` | | | `cash_flow_category.write` |
| [Update a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/update.md) `PATCH /v2/cash_flow_categories/{id}` | | | `cash_flow_category.write` |
| [Delete a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/delete.md) `DELETE /v2/cash_flow_categories/{id}` | | | `cash_flow_category.write` |
| [Assign a cash flow category to transactions](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/assign.md) `POST /v2/cash_flow_categories/assignments` | | | `cash_flow_category.write` |
| [Create a cash flow subcategory](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/create-subcategory.md) `POST /v2/cash_flow_categories/{category_id}/subcategories` | | | `cash_flow_category.write` |
| [Unassign a cash flow category from transactions](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/unassign.md) `POST /v2/cash_flow_categories/unassignments` | | | `cash_flow_category.write` |
| [List cash flow scenarios](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/list.md) `GET /v2/cash_flow_scenarios` | | | `cash_flow_category.read` |
| [Create a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/create.md) `POST /v2/cash_flow_scenarios` | | | `cash_flow_category.write` |
| [Update a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/update.md) `PATCH /v2/cash_flow_scenarios/{id}` | | | `cash_flow_category.write` |
| [Delete a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/delete.md) `DELETE /v2/cash_flow_scenarios/{id}` | | | `cash_flow_category.write` |
| [List cash flow targets](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/list.md) `GET /v2/cash_flow_targets` | | | `cash_flow_category.read` |
| [Create or update cash flow targets](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/upsert.md) `PUT /v2/cash_flow_targets` | | | `cash_flow_category.write` |
| [Delete a cash flow target](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/delete.md) `DELETE /v2/cash_flow_targets` | | | `cash_flow_category.write` |
| [List webhook subscriptions](https://docs.qonto.com/api-reference/business-api/webhooks/list-webhook-subscriptions.md) `GET /v2/webhook_subscriptions` | | | `webhook` |
| [Get a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/get-a-webhook-subscription.md) `GET /v2/webhook_subscriptions/{id}` | | | `webhook` |
| [Create a new webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/create-a-webhook-subscription.md) `POST /v2/webhook_subscriptions` | | | `webhook` |
| [Update a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/update-a-webhook-subscription.md) `PUT /v2/webhook_subscriptions/{id}` | | | `webhook` |
| [Delete a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/delete-a-webhook-subscription.md) `DELETE /v2/webhook_subscriptions/{id}` | | | `webhook` |
| [Dispatch an encoded request](https://docs.qonto.com/api-reference/business-api/authentication/encoded-requests/dispatch.md) `POST /v1/encoded_requests/dispatch` | | | *none declared* |
| [Create an Embed Auth Link](https://docs.qonto.com/api-reference/business-api/authentication/embed-auth-links/create.md) `POST /v1/embed_auth_links` | | | `embed_auth_link.write` |

### Endpoints requiring Strong Customer Authentication

The following endpoints were marked as requiring [Strong Customer Authentication (SCA)](https://docs.qonto.com/guides/authentication/sca-flows.md) in the former endpoints access table. Endpoint pages also describe their SCA requirements below the method and URL.

* [Trust SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/trust.md)
* [Create an international transfer](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-international-transfer.md)
* [Approve a request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/approve-a-request.md)
* [Create a card](https://docs.qonto.com/api-reference/business-api/cards/create-a-card.md)
* [Bulk create cards](https://docs.qonto.com/api-reference/business-api/cards/bulk-create-cards.md)
* [Unlock a card](https://docs.qonto.com/api-reference/business-api/cards/unlock-a-card.md)
* [Update a card's limits](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-limits.md)
* [Close a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/close.md)

## Available scopes

Generated from `api-reference/business-api/components/security/schemes.yml` (scope descriptions and the `x-sensitive-scopes` list).

| Scope | What it grants | Endpoints |
| - | - | - |
| `attachment.read` | Retrieve attachments | *no published endpoint* |
| `attachment.write` | Upload attachments and remove attachments from transactions | [Upload an attachment](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments/upload-an-attachment.md), [Upload an attachment to a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/upload-an-attachment-to-a-transaction.md), [Remove an attachment from a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/remove-an-attachment-from-a-transaction.md), [Remove all attachments from a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/remove-all-attachments-from-a-transaction.md) |
| `bank_account.write` | Create, update and close bank accounts | [Close a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/close.md), [Create a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/create.md), [Update a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/update.md) |
| `beneficiary.trust` Sensitive | Trust SEPA beneficiaries | [Trust SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/trust.md) |
| `card.read` | Retrieve cards | [List cards](https://docs.qonto.com/api-reference/business-api/cards/list-cards.md), [List card appearances](https://docs.qonto.com/api-reference/business-api/cards/list-appearances.md), [Retrieve a card iframe url](https://docs.qonto.com/api-reference/business-api/cards/retrieve-a-card-iframe-url.md) |
| `card.write` | Create or update cards | [Create a card](https://docs.qonto.com/api-reference/business-api/cards/create-a-card.md), [Bulk create cards](https://docs.qonto.com/api-reference/business-api/cards/bulk-create-cards.md), [Update a card's limits](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-limits.md), [Update a card's nickname](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-nickname.md), [Update a card's options](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-options.md), [Update a card's restrictions](https://docs.qonto.com/api-reference/business-api/cards/update-a-cards-restrictions.md), [Lock a card](https://docs.qonto.com/api-reference/business-api/cards/lock-a-card.md), [Unlock a card](https://docs.qonto.com/api-reference/business-api/cards/unlock-a-card.md), [Report a physical card as lost](https://docs.qonto.com/api-reference/business-api/cards/report-a-physical-card-as-lost.md), [Report a physical card as stolen](https://docs.qonto.com/api-reference/business-api/cards/report-a-physical-card-as-stolen.md), [Discard a card](https://docs.qonto.com/api-reference/business-api/cards/discard-a-card.md) |
| `cash_flow_category.read` | Retrieve cash flow categories | [List cash flow categories](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/list.md), [List cash flow scenarios](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/list.md), [List cash flow targets](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/list.md) |
| `cash_flow_category.write` | Create, update and delete cash flow categories, and assign them to transactions | [Create a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/create.md), [Update a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/update.md), [Delete a cash flow category](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/delete.md), [Assign a cash flow category to transactions](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/assign.md), [Create a cash flow subcategory](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/create-subcategory.md), [Unassign a cash flow category from transactions](https://docs.qonto.com/api-reference/business-api/cash-flow/categories/unassign.md), [Create a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/create.md), [Update a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/update.md), [Delete a cash flow scenario](https://docs.qonto.com/api-reference/business-api/cash-flow/scenarios/delete.md), [Create or update cash flow targets](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/upsert.md), [Delete a cash flow target](https://docs.qonto.com/api-reference/business-api/cash-flow/targets/delete.md) |
| `client.read` | Retrieve clients | [List clients](https://docs.qonto.com/api-reference/business-api/invoicing/clients/list-clients.md), [Retrieve a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/retrieve-a-client.md) |
| `client.write` | Create clients | [Create a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/create-a-client.md), [Update a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/update-a-client.md), [Delete a client](https://docs.qonto.com/api-reference/business-api/invoicing/clients/delete-a-client.md) |
| `client_invoice.write` | Create client invoices | [Create a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/create-a-client-invoice.md), [Update a draft client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/update-a-client-invoice.md), [Delete a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/delete-a-client-invoice.md), [Finalize a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/finalize-a-client-invoice.md), [Send a client invoice via email](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/send-a-client-invoice.md), [Send a client invoice via e-invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/send-a-client-invoice-by-e-invoice.md), [Mark a client invoice as paid](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/mark-a-client-invoice-as-paid.md), [Unmark a client invoice as paid](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/unmark-a-client-invoice-as-paid.md), [Cancel a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/mark-a-client-invoice-as-canceled.md), [Import client invoices in bulk](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/bulk-import-client-invoices.md), [Create a client invoice upload](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/create-a-client-invoice-upload.md), [Create a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/create-a-quote.md), [Update a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/patch-a-quote.md), [Delete a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/delete-a-quote.md), [Send a quote via email](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/send-a-quote.md), [Create a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/create-a-credit-note.md), [Create a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/create-a-recurring-invoice.md), [Update a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/update-a-recurring-invoice.md), [Cancel a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/cancel-a-recurring-invoice.md), [Reactivate a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/reactivate-a-recurring-invoice.md), [Suspend a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/suspend-a-recurring-invoice.md), [Validate a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/validate-a-recurring-invoice.md), [Configure payment reminders for a client](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/create-a-reminder.md), [Replace a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/update-a-reminder.md), [Delete a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/delete-a-reminder.md), [Update invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/settings/update-settings.md) |
| `client_invoices.read` | Retrieve client invoices and credit notes | [List client invoices](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/list-client-invoices.md), [Retrieve a client invoice](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/retrieve-a-client-invoice.md), [Retrieve a client invoice upload](https://docs.qonto.com/api-reference/business-api/invoicing/client-invoices/retrieve-a-client-invoice-upload.md), [List quotes](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/list-quotes.md), [Retrieve a quote](https://docs.qonto.com/api-reference/business-api/invoicing/quotes/retrieve-a-quote.md), [List credit notes](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/list-credit-notes.md), [Retrieve a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/retrieve-a-credit-note.md), [Download a credit note](https://docs.qonto.com/api-reference/business-api/invoicing/credit-notes/download-a-credit-note.md), [List recurring invoices](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/list-recurring-invoices.md), [Retrieve a recurring invoice](https://docs.qonto.com/api-reference/business-api/invoicing/recurring-invoices/retrieve-a-recurring-invoice.md), [List payment reminder configurations](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/list-reminders.md), [Get a payment reminder configuration](https://docs.qonto.com/api-reference/business-api/invoicing/reminders/retrieve-a-reminder.md), [Get invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/settings/retrieve-settings.md) |
| `einvoicing.read` | Retrieve e-invoicing settings | [Get e-invoicing settings](https://docs.qonto.com/api-reference/business-api/invoicing/e-invoicing-settings/retrieve-settings.md) |
| `embed_auth_link.write` | Create Embed auth links | [Create an Embed Auth Link](https://docs.qonto.com/api-reference/business-api/authentication/embed-auth-links/create.md) |
| `insurance_contract.read` | Retrieve insurance contracts | [Retrieve an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/retrieve-an-insurance-contract.md) |
| `insurance_contract.write` | Create and update insurance contracts | [Create an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/create-an-insurance-contract.md), [Update an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/update-an-insurance-contract.md), [Upload a document to an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/upload-a-document-to-an-insurance-contract.md), [Remove a document from an insurance contract](https://docs.qonto.com/api-reference/business-api/spend-management/insurance-contracts/remove-a-document-from-an-insurance-contract.md) |
| `internal_transfer.write` Sensitive | Create internal transfers (between 2 Qonto accounts of the same organization) | [Create an internal transfer](https://docs.qonto.com/api-reference/business-api/transfers/internal-transfers/create-an-internal-transfer.md) |
| `international_transfer.write` Sensitive | Create international transfers | [Create a new international transfer quote](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-international-quote.md), [List requirements for an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-beneficiary-requirements.md), [Create an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-beneficiary.md), [Update an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/update-beneficiary.md), [Delete an international beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/delete-beneficiary.md), [List international transfer requirements](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-transfer-requirements.md), [Create an international transfer](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/create-international-transfer.md) |
| `membership.read` | Retrieve the authentified membership | [Retrieve the authenticated membership](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/retrieve-the-authenticated-membership.md) |
| `membership.write` | Invite team members | [Create a membership](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/create-a-membership.md) |
| `offline_access` | Retrieve a refresh token | *no published endpoint* |
| `organization.read` Sensitive | Retrieve organization, bank accounts, transactions, transfers, beneficiaries, labels, memberships, requests & statements | [Revoke consents](https://docs.qonto.com/api-reference/business-api/authentication/oauth2/revoke-oauth-consents.md), [Retrieve the authenticated organization and list bank accounts](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/retrieve-the-authenticated-organization-and-list-bank-accounts.md), [Show organization (v2 · deprecated)](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/show-organization.md), [Show organization (v1 · deprecated)](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/show-organization-v1.md), [List business accounts](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/list.md), [Get a business account](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/show.md), [Download the IBAN certificate](https://docs.qonto.com/api-reference/business-api/organization-accounts/business-accounts/download-iban-certificate.md), [List memberships](https://docs.qonto.com/api-reference/business-api/organization-accounts/memberships/list-memberships.md), [List labels](https://docs.qonto.com/api-reference/business-api/organization-accounts/labels/list-labels.md), [Retrieve a label](https://docs.qonto.com/api-reference/business-api/organization-accounts/labels/retrieve-a-label.md), [List transactions](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/list-transactions.md), [Retrieve a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/retrieve-a-transaction.md), [List child transaction links](https://docs.qonto.com/api-reference/business-api/transactions-statements/transactions/list-child-transaction-links.md), [List statements](https://docs.qonto.com/api-reference/business-api/transactions-statements/statements/list-statements.md), [Retrieve a statement](https://docs.qonto.com/api-reference/business-api/transactions-statements/statements/retrieve-a-statement.md), [Retrieve an attachment](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments/retrieve-an-attachment.md), [List attachments for a transaction](https://docs.qonto.com/api-reference/business-api/transactions-statements/attachments-in-transactions/list-attachments-for-a-transaction.md), [List SEPA transfers](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/index.md), [Get SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/show.md), [List SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/index.md), [Retrieve a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/show.md), [List Bulk Transfers](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/index.md), [Get Bulk Transfer](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/show.md), [List SEPA recurring transfers](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/index.md), [Get SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/show.md), [Check if the organization is eligible for international transfers](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/check-eligibility.md), [Get available currencies for international transfers](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-available-currencies.md), [List international beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/international-transfers/list-beneficiaries-by-currency.md), [List requests](https://docs.qonto.com/api-reference/business-api/spend-management/requests/list-requests.md) |
| `payment.write` Sensitive | Create external transfers and untrust beneficiaries | [Create a SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/create.md), [Download proof of a SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/download-proof.md), [Cancel SEPA transfer](https://docs.qonto.com/api-reference/business-api/transfers/sepa-transfers/cancel.md), [Add a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/create.md), [Update a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/update.md), [Delete a SEPA beneficiary](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/delete.md), [Untrust SEPA beneficiaries](https://docs.qonto.com/api-reference/business-api/transfers/sepa-beneficiaries/untrust.md), [Verify a SEPA payee](https://docs.qonto.com/api-reference/business-api/transfers/verification-of-payee/index.md), [Bulk verify SEPA payees](https://docs.qonto.com/api-reference/business-api/transfers/verification-of-payee/bulk-verify-payee.md), [Create a Bulk Transfer](https://docs.qonto.com/api-reference/business-api/transfers/bulk-transfers/create.md), [Create a SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/create.md), [Cancel SEPA recurring transfer](https://docs.qonto.com/api-reference/business-api/transfers/recurring-transfers/cancel.md) |
| `payment_link.read` | Retrieve payment links, their payments, and the available payment methods | [List payment links](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index.md), [Get a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/show.md), [List payments for a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index-payments.md), [List available payment methods](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/index-payment-methods.md), [Get the connection status](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/get-connection.md) |
| `payment_link.write` | Connect to the payment links provider, create and deactivate payment links | [Create a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/create.md), [Deactivate a payment link](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/deactivate.md), [Connect to the payment links provider](https://docs.qonto.com/api-reference/business-api/getting-paid/payment-links/connect.md) |
| `product.read` | Retrieve products | [List products](https://docs.qonto.com/api-reference/business-api/invoicing/products/list-products.md), [Retrieve a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/retrieve-a-product.md) |
| `product.write` | Create products | [Create a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/create-a-product.md), [Delete a product](https://docs.qonto.com/api-reference/business-api/invoicing/products/delete-a-product.md) |
| `request_cards.write` | Create card requests | *no published endpoint* |
| `request_review.write` | Approve or decline requests | [Approve a request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/approve-a-request.md), [Decline a request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/decline-a-request.md) |
| `request_transfers.write` | Create transfer requests | [Create transfer request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-transfer-request.md), [Create multi transfer request](https://docs.qonto.com/api-reference/business-api/spend-management/requests/create-multi-transfer-request.md) |
| `sepa_direct_debit.read` | View SEPA Direct Debit payments | [List SEPA Direct Debit mandates](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/index.md), [Get a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/show.md), [List SEPA Direct Debit subscriptions](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/index.md), [Get a SEPA Direct Debit subscription](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/show.md), [List SEPA Direct Debit collections](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/collections/index.md), [Get a SEPA Direct Debit collection](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/collections/show.md) |
| `sepa_direct_debit.write` | Manage SEPA Direct Debit payments | [Create a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/create.md), [Cancel a SEPA Direct Debit mandate](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/mandates/cancel.md), [Create a SEPA Direct Debit subscription](https://docs.qonto.com/api-reference/business-api/getting-paid/sepa-direct-debit/subscriptions/create.md) |
| `subscription.read` | Retrieve the organization's current subscription plan | [Retrieve the organization's current subscription plan](https://docs.qonto.com/api-reference/business-api/organization-accounts/subscription/get-subscription.md) |
| `supplier_invoice.read` | Retrieve supplier invoices | [Search suppliers](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/search-suppliers.md), [Retrieve a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/retrieve-a-supplier.md), [List supplier invoices](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/list-supplier-invoices.md), [Retrieve a supplier invoice](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/retrieve-a-supplier-invoice.md) |
| `supplier_invoice.write` | Create supplier invoices | [Create a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/create-supplier.md), [Update a supplier](https://docs.qonto.com/api-reference/business-api/spend-management/suppliers/update-supplier.md), [Create supplier invoices](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/create-supplier-invoices.md), [Mark a supplier invoice as paid](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/mark-supplier-invoice-as-paid.md), [Reject a supplier invoice](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/reject-supplier-invoice.md), [Unmark a supplier invoice as paid](https://docs.qonto.com/api-reference/business-api/spend-management/supplier-invoices/unmark-supplier-invoice-as-paid.md) |
| `team.read` | Retrieve teams | [List teams](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/list-teams.md) |
| `team.write` | Create teams | [Create a team](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/create-a-team.md), [Update a team](https://docs.qonto.com/api-reference/business-api/organization-accounts/teams/update-a-team.md) |
| `terminal.read` | View your payment terminals | [List terminals](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/list-terminals.md), [Get a terminal payment](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/get-terminal-payment.md) |
| `terminal.write` | Configure your terminals and initiate payments | [Create a terminal payment](https://docs.qonto.com/api-reference/business-api/getting-paid/terminals/create-terminal-payment.md) |
| `user_organization.read` | View the organizations the user has granted access to | [Get user organizations](https://docs.qonto.com/api-reference/business-api/organization-accounts/organizations/get-user-organizations.md) |
| `webhook` | Receive a notification each time a particular event occurs in Qonto | [List webhook subscriptions](https://docs.qonto.com/api-reference/business-api/webhooks/list-webhook-subscriptions.md), [Get a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/get-a-webhook-subscription.md), [Create a new webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/create-a-webhook-subscription.md), [Update a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/update-a-webhook-subscription.md), [Delete a webhook subscription](https://docs.qonto.com/api-reference/business-api/webhooks/delete-a-webhook-subscription.md) |

## Consent messages

Consent messages are displayed to Qonto users on the consent screen during the OAuth authorization flow. Scopes marked **NA** do not display a permission entry on the consent screen.

| Scope | Consent message | Restrictions |
| - | - | - |
| `organization.read` |  Get and export info about your balance, IBAN, transactions, organization and team | |
| `payment.write` |  Remove beneficiaries from trusted beneficiaries  Make payments to trusted beneficiaries  Make payments to any beneficiary (requiring identity verification from the phone you've paired with Qonto) | |
| `internal_transfer.write` | NA | |
| `international_transfer.write` |  Make international transfers | |
| `attachment.read` |  Get and export attachments | |
| `attachment.write` |  Upload attachments   Remove attachments from transactions | |
| `membership.read` |  Get and export your personal data, e.g. identity information, contact details (including your address), and role | |
| `membership.write` |  Invite new members to teams | |
| `supplier_invoice.read` |  Get the list of supplier invoices | |
| `supplier_invoice.write` |  Generate supplier invoices | |
| `client_invoices.read` |  Get the list of client invoices, quotes and credit notes  Get all the details about client invoices, credit notes, quotes and clients | |
| `client_invoice.write` |  Create and update client invoices, quotes and add clients | |
| `product.read` |  Get the list of products | |
| `product.write` |  Create products | |
| `client.read` |  Get all the details about clients | |
| `client.write` |  Create, update and delete clients | |
| `team.read` |  Get the list of teams | |
| `team.write` | NA | |
| `card.read` |  Get all the details about your cards | |
| `card.write` |  Create new cards | |
| `insurance_contract.read` |  Share your insurance policy details with Qonto | |
| `insurance_contract.write` |  Sync your insurance policy details with Qonto | |
| `request_review.write` | NA | |
| `request_transfers.write` | NA | |
| `request_cards.write` | NA | |
| `bank_account.write` | NA | |
| `beneficiary.trust` |  Mark beneficiaries as trusted or remove them from trusted beneficiaries | Automate your business operations and Embed use cases only |
| `payment_link.write` |  Create and manage payment links | |
| `payment_link.read` |  View payment links and payment activity | |
| `einvoicing.read` |  Get e-invoicing settings | |
| `user_organization.read` |  View the organizations the user grant access to | |
| `cash_flow_category.read` |  View your cash flow categories | |
| `cash_flow_category.write` |  Create cash flow categories and assign them to transactions | |
| `subscription.read` |  View your organization's current subscription plan | |
| `webhook` | NA | |
| `sepa_direct_debit.read` |  View your SEPA Direct Debit payments  View and manage your SEPA Direct Debit payments (*when together with `sepa_direct_debit.write`*) | |
| `sepa_direct_debit.write` |  Manage your SEPA Direct Debit payments  View and manage your SEPA Direct Debit payments (*when together with `sepa_direct_debit.read`*) | |
| `terminal.read` |  View your payment terminals | |
| `terminal.write` |  Configure your terminals and initiate payments | |

Consent messages are displayed on the consent screen 👇
![Consent screen](https://qonto-assets.s3.eu-central-1.amazonaws.com/oauth-clients/flow/OAuth-consent-screen.png)