> ## Documentation Index
> Fetch the complete documentation index at: https://developer.klikit.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Scopes

> What each credential is allowed to do.

A partner credential is bound to one business and granted a subset of
scopes. The endpoint you call must be covered by at least one scope on your
credential, or the response is `403 FORBIDDEN_SCOPE`.

## Scope catalogue

| Scope              | Endpoints it unlocks                                                                                                                                  |
| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| `brands:read`      | `GET /brands`, `GET /branches`, `GET /providers`, `GET /price/groups`                                                                                 |
| `brands:update`    | `PATCH /brands/{id}`, pricing-group writes (`POST`/`PUT`/`PATCH`/`DELETE /price/groups`) — see [Pricing groups](/partner-api/concepts/pricing-groups) |
| `menus:read`       | `GET /menus` (store-level and business-level)                                                                                                         |
| `menus:oos`        | `PATCH /items/{partner_item_id}/availability`, bulk OOS updates                                                                                       |
| `orders:read`      | `GET /orders`, `GET /orders/{id}`                                                                                                                     |
| `visibility:write` | Branch and brand visibility toggles                                                                                                                   |
| `webhooks:read`    | Read your registered webhook URLs (operator-driven today)                                                                                             |

## Asking for more scopes

Scope changes are made by your klikit operator. Send the list of scopes you
need and the business id to [integrations@klikit.io](mailto:integrations@klikit.io)
and we'll widen the credential. No code change on your side — the next
request after the update reflects the new permissions.