Scopes - klikit developers

A partner credential is bound to one business and granted a subset of scopes. The endpoint you call must be covered by at least one scope on your credential, or the response is 403 FORBIDDEN_SCOPE.

Scope catalogue

Scope	Endpoints it unlocks
`brands:read`	`GET /brands`, `GET /branches`, `GET /providers`, `GET /price/groups`
`brands:update`	`PATCH /brands/{id}`, pricing-group writes (`POST`/`PUT`/`PATCH`/`DELETE /price/groups`) — see Pricing groups
`menus:read`	`GET /menus` (store-level and business-level)
`menus:oos`	`PATCH /items/{partner_item_id}/availability`, bulk OOS updates
`orders:read`	`GET /orders`, `GET /orders/{id}`
`visibility:write`	Branch and brand visibility toggles
`webhooks:read`	Read your registered webhook URLs (operator-driven today)

Asking for more scopes

Scope changes are made by your klikit operator. Send the list of scopes you need and the business id to [email protected] and we’ll widen the credential. No code change on your side — the next request after the update reflects the new permissions.