Scopes & Permissions

Scopes are independent; read never implies write. Location-owned resources also require an explicit location grant.

Scope	Permits	Location grants
merchant.read	Merchant profile	No
locations.read	Granted locations	Filters results
catalog.read / catalog.write	Products and categories; simple catalog writes	Writes to products require every active location grant
inventory.read / inventory.write	Levels, movements, and adjustments	Yes
customers.read / customers.write	Redacted customer contact records	No; merchant-wide
orders.read / orders.write	Orders and unpaid draft creation	Yes
payments.read	Persisted tender evidence	Yes
suppliers.read	Supplier summaries and details	No; merchant-wide
purchases.read	Purchase orders	Yes
fiscal.read	Approved invoice/credit-note status metadata	Yes

No public scope currently authorizes payment capture, refunds, completed-sale injection, fiscal mutation, provider credentials, or workforce mutation.