Understand API key scopes and how they control what your application can do.
Scopes
What Are Scopes?
Scopes are permissions attached to your API key. They control what the key is allowed to do. If a key with only read access gets leaked, no one can move money with it.
Available Scopes
Wallet Scopes
Scope
Allows
wallet:create
Create new wallets for the organization
wallet:read
List wallets, get wallet details, check balances, get user info for a wallet, resolve tokens on-chain
Token Scopes
Scope
Allows
token:transfer
Prepare ERC-20 token transfer transaction objects
token:approve
Prepare ERC-20 token approve transaction objects
Transaction Scopes
Scope
Allows
transaction:read
View transaction history for organization wallets
transaction:execute
Execute pre-signed transactions through the relayer
Passkey Scopes
Scope
Allows
passkey:manage
List on-chain recovery passkeys for organization wallets
Domain Scopes
Scope
Allows
domain:read
Get domain info (authorization, fees, owner, treasury) and list allowed tokens
How to Choose Scopes
Follow the principle of least privilege: give each API key only the scopes it actually needs.