> ## Documentation Index > Fetch the complete documentation index at: https://docs.qonto.com/llms.txt > Use this file to discover all available pages before exploring further. # Available scopes > **Need the OAuth scope required for each endpoint?** Check the [endpoints access](/get-started/business-api/authentication/introduction#endpoints-access) table. OAuth scopes define what your application is allowed to do on behalf of a Qonto user. When a user connects their account, they see a consent screen listing the exact permissions your application is requesting. Only request the scopes you actually need. **Building a new integration?** Before selecting scopes, make sure you've chosen the right [use case for your application](/get-started/general/developer-guidelines#selecting-your-use-case). If your integration uses [sensitive scopes](/get-started/general/developer-guidelines#sensitive-scopes), check the approval requirements by use case before going to production. ## Scope selection guidance ### Do you need `organization.read`? `organization.read` is one of the most commonly requested scopes, but also the most broad. Before requesting it, consider whether a narrower scope covers your actual need: | If you need to... | Use this scope instead | | ---------------------------------------- | ---------------------------------------------------------------------------------------------------------- | | Download supplier or client invoice PDFs | `attachment.read` — see workaround below | | Read a user's personal identity and role | `membership.read` | | List all members of an organization | `organization.read` is required — `membership.read` only retrieves the authenticated user's own membership | | List transactions | `organization.read` is required | | Access balances or IBANs | `organization.read` is required | ### Do you need `beneficiary.trust` or `payment.write` for beneficiary management? These two scopes cover different sides of SEPA beneficiary trust management and are often needed together: | If you need to... | Use this scope | | ------------------------------------------------------------------------- | ----------------------------------------- | | Mark a beneficiary as trusted (to enable automated transfers without SCA) | `beneficiary.trust` — Embed partners only | | Untrust a beneficiary | `payment.write` | | Both trust and untrust beneficiaries | Request both scopes | Trusting a beneficiary lets your integration initiate transfers to that beneficiary without requiring SCA on every transaction. The actual transfer still requires `payment.write`. ### Fetching invoice PDFs without `organization.read` If your only requirement is downloading supplier or client invoice PDFs, you can avoid the sensitive `organization.read` scope entirely by using `attachment.read`. **How it works:** 1. Fetch the supplier invoice ([`supplier_invoice.read`](/api-reference/business-api/expense-management/supplier-invoices/retrieve-a-supplier-invoice)) or client invoice ([`client_invoices.read`](/api-reference/business-api/expense-management/client-quotes-notes/client-invoices/retrieve-a-client-invoice)). The response includes an `attachment_id` field. 2. Call `GET /v2/attachments/{id}` using the `attachment.read` scope. 3. The response includes a pre-signed `url` you can use to download the PDF directly. This approach only works when fetching invoice PDFs is your sole need. If you also need transaction data, account balances, or organization details, `organization.read` is still required. For client invoices in Factur-X format, the PDF may need to be regenerated before download. If the `url` is not immediately available in the response, retry the request after a short delay. [Learn more](/api-reference/business-api/expense-management/client-quotes-notes/introduction-factur-x) *** ## Available scopes Consent messages shown in the table below are displayed to Qonto users on the consent screen during the OAuth authorization flow. Scopes marked **NA** in the consent message column do not display a permission entry on the consent screen. | Scope | Consent message | Endpoints | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `organization.read`
**Sensitive** | Get and export info about your balance, IBAN, transactions, organization and team | - External transfers: [Retrieve an external transfer](/api-reference/business-api/payments-transfers/external-transfers/retrieve-an-external-transfer), [List external transfers](/api-reference/business-api/payments-transfers/external-transfers/list-external-transfers)
- Beneficiaries: [List beneficiaries](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/list-beneficiaries), [Retrieve a beneficiary](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/retrieve-a-beneficiary), [List SEPA beneficiaries](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/index), [Retrieve a SEPA beneficiary](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/show)
- Labels: [List labels](/api-reference/business-api/accounts-organizations/labels/list-labels), [Retrieve a label](/api-reference/business-api/accounts-organizations/labels/retrieve-a-label)
- Memberships: [List memberships](/api-reference/business-api/accounts-organizations/memberships/list-memberships)
- Organization: [Retrieve the authenticated organization and list bank accounts](/api-reference/business-api/accounts-organizations/organizations/retrieve-the-authenticated-organization-and-list-bank-accounts)
- Transactions: [List transactions](/api-reference/business-api/transactions-statements/transactions/list-transactions), [Retrieve a transaction](/api-reference/business-api/transactions-statements/transactions/retrieve-a-transaction)
- Requests: [List requests](/api-reference/business-api/expense-management/requests/list-requests)
- Statements: [Retrieve a statement](/api-reference/business-api/transactions-statements/statements/retrieve-a-statement), [List statements](/api-reference/business-api/transactions-statements/statements/list-statements)
- Business Accounts: [List business accounts](/api-reference/business-api/accounts-organizations/business-accounts/list), [Retrieve a business account](/api-reference/business-api/accounts-organizations/business-accounts/show), [Download the IBAN certificate](/api-reference/business-api/accounts-organizations/business-accounts/download-iban-certificate)
- SEPA Transfers: [List SEPA transfers](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-transfers/index), [Retrieve a SEPA transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-transfers/show)
- SEPA Recurring Transfers: [List SEPA recurring transfers](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-recurring-transfers/index), [Retrieve a SEPA recurring transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-recurring-transfers/show)
- SEPA Bulk Transfers: [List SEPA bulk transfers](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-bulk-transfers/index), [Retrieve a SEPA bulk transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-bulk-transfers/show) | | `payment.write`
**Sensitive** | Remove beneficiaries from trusted beneficiaries
Make payments to trusted beneficiaries
Make payments to any beneficiary (requiring identity verification from the phone you've paired with Qonto) | - External transfers: [Create an external transfer for a trusted beneficiary](/api-reference/business-api/payments-transfers/external-transfers/create-an-external-transfer-for-a-trusted-beneficiary), [Create external transfers with beneficiaries data](/api-reference/business-api/payments-transfers/external-transfers/create-external-transfers-with-beneficiaries-data)
- Beneficiaries: [Untrust a list of beneficiaries](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/untrust-a-list-of-beneficiaries), [Add a SEPA beneficiary](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/create), [Update a SEPA beneficiary](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/update), [Untrust SEPA beneficiaries](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/untrust)
- SEPA Transfers: [Create a SEPA transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-transfers/create), [Cancel a SEPA transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-transfers/cancel), [Download a SEPA transfer proof](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-transfers/download-proof)
- SEPA Recurring Transfers: [Create a SEPA recurring transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-recurring-transfers/create), [Cancel a SEPA recurring transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-recurring-transfers/cancel)
- SEPA Bulk Transfers: [Create a SEPA bulk transfer](/api-reference/business-api/payments-transfers/sepa-transfers/sepa-bulk-transfers/create) | | `internal_transfer.write`
**Sensitive** | NA | [Create an internal transfer](/api-reference/business-api/payments-transfers/internal-transfers/create-an-internal-transfer) | | `international_transfer.write`
**Sensitive** | Make international transfers | - Transfers: [List International transfer requirements](/api-reference/business-api/payments-transfers/international-transfers/list-transfer-requirements), [Create International Transfers](/api-reference/business-api/payments-transfers/international-transfers/create-international-transfer)
- Beneficiaries: [List requirements for an international beneficiary](/api-reference/business-api/payments-transfers/international-transfers/list-beneficiary-requirements), [Update an international beneficiary](/api-reference/business-api/payments-transfers/international-transfers/update-beneficiary), [Create an international beneficiary](/api-reference/business-api/payments-transfers/international-transfers/create-beneficiary), [Delete an international beneficiary](/api-reference/business-api/payments-transfers/international-transfers/delete-beneficiary)
- Quotes: [Create a new international transfer quote](/api-reference/business-api/payments-transfers/international-transfers/create-international-quote) | | `attachment.read` | Get and export attachments | - Attachments: [Retrieve an attachment](/api-reference/business-api/expense-management/attachments/retrieve-an-attachment)
- Attachments in transactions: [List attachments for a transaction](/api-reference/business-api/expense-management/attachments-in-transactions/list-attachments-for-a-transaction) | | `attachment.write` | Upload attachments
Remove attachments from transactions | - Attachments: [Upload an attachment](/api-reference/business-api/expense-management/attachments/upload-an-attachment)
- Attachments in transactions: [Upload an attachment to a transaction](/api-reference/business-api/expense-management/attachments-in-transactions/upload-an-attachment-to-a-transaction), [Remove all attachments from a transaction](/api-reference/business-api/expense-management/attachments-in-transactions/remove-all-attachments-from-a-transaction), [Remove an attachment from a transaction](/api-reference/business-api/expense-management/attachments-in-transactions/remove-an-attachment-from-a-transaction) | | `membership.read` | Get and export your personal data, e.g. identity information, contact details (including your address), and role | [Retrieve the authenticated membership](/api-reference/business-api/accounts-organizations/memberships/retrieve-the-authenticated-membership) | | `membership.write` | Invite new members to teams | [Create a membership](/api-reference/business-api/accounts-organizations/memberships/create-a-membership) | | `supplier_invoice.read` | Get the list of supplier invoices | [List supplier invoices](/api-reference/business-api/expense-management/supplier-invoices/list-supplier-invoices), [Retrieve a supplier invoice](/api-reference/business-api/expense-management/supplier-invoices/retrieve-a-supplier-invoice) | | `supplier_invoice.write` | Generate supplier invoices | [Create supplier invoices](/api-reference/business-api/expense-management/supplier-invoices/create-supplier-invoices) | | `client_invoices.read` | Get the list of client invoices, quotes and credit notes
Get all the details about client invoices, credit notes, quotes and clients | - Client invoices: [List client invoices](/api-reference/business-api/expense-management/client-quotes-notes/client-invoices/list-client-invoices), [Retrieve a client invoice](/api-reference/business-api/expense-management/client-quotes-notes/client-invoices/retrieve-a-client-invoice)
- Credit notes: [List credit notes](/api-reference/business-api/expense-management/client-quotes-notes/credit-notes/list-credit-notes), [Retrieve a credit note](/api-reference/business-api/expense-management/client-quotes-notes/credit-notes/retrieve-a-credit-note) | | `client_invoice.write` | Create and update client invoices, quotes and add clients | [Create a client invoice](/api-reference/business-api/expense-management/client-quotes-notes/client-invoices/create-a-client-invoice), [Update a client invoice](/api-reference/business-api/expense-management/client-quotes-notes/client-invoices/update-a-client-invoice) | | `product.read` | Get the list of products | [List products](/api-reference/business-api/expense-management/products/list-products) | | `product.write` | Create products | [Create a product](/api-reference/business-api/expense-management/products/create-a-product) | | `client.read` | Get all the details about clients | [Retrieve a client](/api-reference/business-api/clients/retrieve-a-client), [List clients](/api-reference/business-api/clients/list-clients) | | `client.write` | Create, update and delete clients | [Create a client](/api-reference/business-api/clients/create-a-client), [Update a client](/api-reference/business-api/clients/update-a-client), [Delete a client](/api-reference/business-api/clients/delete-a-client) | | `team.read` | Get the list of teams | [List teams](/api-reference/business-api/accounts-organizations/teams/list-teams) | | `team.write` | NA | [Create a team](/api-reference/business-api/accounts-organizations/teams/create-a-team) | | `card.read` | Get all the details about your cards | [List cards](/api-reference/business-api/cards/list-cards), [Retrieve a card iframe url](/api-reference/business-api/cards/retrieve-a-card-iframe-url), [List card appearances](/api-reference/business-api/cards/list-appearances) | | `card.write` | Create new cards | [Create a card](/api-reference/business-api/cards/create-a-card), [Report a physical card as lost](/api-reference/business-api/cards/report-a-physical-card-as-lost), [Report a physical card as stolen](/api-reference/business-api/cards/report-a-physical-card-as-stolen), [Discard a card](/api-reference/business-api/cards/discard-a-card), [Lock a card](/api-reference/business-api/cards/lock-a-card), [Unlock a card](/api-reference/business-api/cards/unlock-a-card) | | `insurance_contract.read` | Share your insurance policy details with Qonto | [Retrieve an insurance contract](/api-reference/business-api/expense-management/insurance-contracts/retrieve-an-insurance-contract) | | `insurance_contract.write` | Sync your insurance policy details with Qonto | [Create an insurance contract](/api-reference/business-api/expense-management/insurance-contracts/create-an-insurance-contract), [Update an insurance contract](/api-reference/business-api/expense-management/insurance-contracts/update-an-insurance-contract), [Upload a document to an insurance contract](/api-reference/business-api/expense-management/insurance-contracts/upload-a-document-to-an-insurance-contract), [Remove a document from an insurance contract](/api-reference/business-api/expense-management/insurance-contracts/remove-a-document-from-an-insurance-contract) | | `request_review.write` | NA | [Approve a request](/api-reference/business-api/expense-management/requests/approve-a-request), [Decline a request](/api-reference/business-api/expense-management/requests/decline-a-request) | | `request_transfers.write` | NA | [Create multi transfer request](/api-reference/business-api/expense-management/requests/create-multi-transfer-request) | | `request_cards.write` | NA | [Create a flash card request](/api-reference/business-api/expense-management/requests/create-a-flash-card-request), [Create a virtual card request](/api-reference/business-api/expense-management/requests/create-a-virtual-card-request) | | `bank_account.write` | NA | [Create a business account](/api-reference/business-api/accounts-organizations/business-accounts/create), [Update a business account](/api-reference/business-api/accounts-organizations/business-accounts/update), [Close a business account](/api-reference/business-api/accounts-organizations/business-accounts/close) | | `beneficiary.trust`
**Sensitive**
**Embed partners only** | Mark beneficiaries as trusted or remove them from trusted beneficiaries | [Trust SEPA beneficiaries](/api-reference/business-api/payments-transfers/sepa-transfers/beneficiaries/sepa-beneficiaries/trust) | | `payment_link.write` | Create and manage payment links | - [Connect to the payment links provider](/api-reference/business-api/payments-transfers/payment-links/connect)
- [Create a payment link](/api-reference/business-api/payments-transfers/payment-links/create)
- [Deactivate a payment link](/api-reference/business-api/payments-transfers/payment-links/deactivate) | | `payment_link.read` | View payment links and payment activity | - [Get the connection status](/api-reference/business-api/payments-transfers/payment-links/get-connection)
- [List payment links](/api-reference/business-api/payments-transfers/payment-links/index)
- [Retrieve a payment link](/api-reference/business-api/payments-transfers/payment-links/show)
- [List payments for a payment link](/api-reference/business-api/payments-transfers/payment-links/index-payments)
- [List available payment methods](/api-reference/business-api/payments-transfers/payment-links/index-payment-methods) | | `einvoicing.read` | Get e-invoicing settings | [Retrieve e-invoicing settings](/api-reference/business-api/expense-management/e-invoicing/retrieve-settings) | | `user_organization.read` | View the organizations the user grant access to | [List user organizations](/api-reference/business-api/accounts-organizations/organizations/get-user-organizations) | | `webhook` | NA | - [List webhook subscriptions](/api-reference/business-api/webhooks/list-webhook-subscriptions)
- [Create a new webhook subscription](/api-reference/business-api/webhooks/create-a-webhook-subscription)
- [Get a webhook subscription](/api-reference/business-api/webhooks/get-a-webhook-subscription)
- [Update a webhook subscription](/api-reference/business-api/webhooks/update-a-webhook-subscription)
- [Delete a webhook subscription](/api-reference/business-api/webhooks/delete-a-webhook-subscription) | | `sepa_direct_debit.read` | View your SEPA Direct Debit payments
View and manage your SEPA Direct Debit payments (*when together with `sepa_direct_debit.write`*) | - SDD Mandates: [List SEPA Direct Debit mandates](/api-reference/business-api/payments-transfers/sepa-direct-debit/mandates/index.mdx), [Get a SEPA Direct Debit mandate](/api-reference/business-api/payments-transfers/sepa-direct-debit/mandates/show.mdx)
- SDD Subscriptions: [List SEPA Direct Debit subscriptions](/api-reference/business-api/payments-transfers/sepa-direct-debit/subscriptions/index.mdx), [Get a SEPA Direct Debit subscription](/api-reference/business-api/payments-transfers/sepa-direct-debit/subscriptions/show.mdx)
- SDD Collections: [List SEPA Direct Debit collections](/api-reference/business-api/payments-transfers/sepa-direct-debit/collections/index.mdx), [Get a SEPA Direct Debit collection](/api-reference/business-api/payments-transfers/sepa-direct-debit/collections/show.mdx) | | `sepa_direct_debit.write` | Manage your SEPA Direct Debit payments
View and manage your SEPA Direct Debit payments (*when together with `sepa_direct_debit.read`*) | - SDD Mandates: [Create a SEPA Direct Debit mandate](/api-reference/business-api/payments-transfers/sepa-direct-debit/mandates/create.mdx)
- SDD Subscriptions: [Create a SEPA Direct Debit subscription](/api-reference/business-api/payments-transfers/sepa-direct-debit/subscriptions/create.mdx) | | `terminal.read` | View your payment terminals | - [List terminals](/api-reference/business-api/terminals/list-terminals)
- [Get a terminal payment](/api-reference/business-api/terminals/get-terminal-payment) | | `terminal.write` | Configure your terminals and initiate payments | - [Create a terminal payment](/api-reference/business-api/terminals/create-terminal-payment) | Consent messages are displayed on the consent screen 👇 ![Consent screen](https://qonto-assets.s3.eu-central-1.amazonaws.com/oauth-clients/flow/OAuth-consent-screen.png)