Skip to main content
API tokens in Dynamic are scoped to specific resources and actions, ensuring that each token only has the minimum permissions necessary for its intended use case. This follows the principle of least privilege, enhancing security by limiting access to only what’s required. When creating an API token, you can select from the following permission scopes, organized by resource type:

WaaS (Wallet as a Service) Permissions

waas.authenticate

Description: Authenticate with WaaS (Wallet as a Service) for wallet operations.
Method & EndpointDescription
POST /environments/:environmentId/waas/authenticateAuthenticate WaaS

waas.delegatedAccess.signMessage

Description: Sign messages on behalf of users through delegated wallet access.
Method & EndpointDescription
POST /environments/:environmentId/waas/:walletId/delegatedAccess/signMessageDelegate sign message for wallet

Environment Permissions

environment.balances.read

Description: Read user balance information across multiple chains.
Method & EndpointDescription
POST /environments/:environmentId/users/:userId/balancesGet multichain account balances for a user

environment.apiTokens.read

Description: Read environment API token information.
Method & EndpointDescription
GET /environments/:environmentId/tokensGet API tokens for environment

environment.apiTokens.write

Description: Create and manage environment API tokens.
Method & EndpointDescription
POST /environments/:environmentId/tokensCreate API token
DELETE /environments/:environmentId/tokens/:tokenIdDelete API token

environment.events.read

Description: Read event data and event types for the environment.
Method & EndpointDescription
GET /eventTypesGet event types
GET /environments/:environmentId/eventsGet events for environment
GET /environments/:environmentId/events/:eventIdGet specific event

environment.webhooks.read

Description: Read webhook configurations and message history.
Method & EndpointDescription
GET /environments/:environmentId/webhooksGet webhooks for environment
GET /environments/:environmentId/webhooks/:webhookIdGet specific webhook
GET /environments/:environmentId/webhooks/:webhookId/messagesGet webhook messages
GET /environments/:environmentId/webhooks/:webhookId/messages/:messageIdGet webhook message deliveries

environment.webhooks.write

Description: Create, update, and manage webhook configurations.
Method & EndpointDescription
POST /environments/:environmentId/webhooksCreate webhook
PUT /environments/:environmentId/webhooks/:webhookIdUpdate webhook
DELETE /environments/:environmentId/webhooks/:webhookIdDelete webhook
POST /environments/:environmentId/webhooks/:webhookId/messages/:messageId/redeliverRedeliver webhook message

environment.analytics.read

Description: Read analytics data including visits, wallets, and engagement metrics.
Method & EndpointDescription
GET /environments/:environmentId/analytics/visitsGet daily sessions
GET /environments/:environmentId/analytics/walletsGet wallets breakdown
GET /environments/:environmentId/analytics/overviewGet analytics overview
GET /environments/:environmentId/analytics/toplineGet analytics topline
GET /environments/:environmentId/analytics/engagementGet analytics engagement
GET /environments/:environmentId/analytics/walletsBreakdownGet analytics wallets breakdown

environment.users.read

Description: Read user data, wallets, and related information.
Method & EndpointDescription
GET /oauthAccounts/:oauthAccountId/accessTokenGet OAuth access token
GET /environments/:environmentId/embeddedWalletVersionsGet active embedded wallet versions
POST /users/:userId/walletsCreate wallet for user (deprecated)
POST /environments/:environmentId/users/:userId/walletsCreate wallet for user
GET /users/:userId/walletsGet wallets for user (deprecated)
GET /environments/:environmentId/users/:userId/walletsGet wallets for user
GET /wallets/:walletIdGet wallet by ID (deprecated)
GET /environments/:environmentId/wallets/:walletIdGet wallet by ID
GET /users/:userIdGet user by ID (deprecated)
GET /environments/:environmentId/users/:userIdGet user by ID
GET /environments/:environmentId/usersGet users for environment
GET /environments/:environmentId/exportsGet environment exports
GET /environments/:environmentId/exports/:exportId/downloadDownload export by ID
GET /environments/:environmentId/exports/:exportIdGet export by ID

environment.users.write

Description: Create, update, and manage users, wallets, and user-related data.
Method & EndpointDescription
POST /environments/:environmentId/embeddedWalletsCreate embedded wallet
POST /environments/:environmentId/embeddedWallets/farcasterCreate embedded wallet from Farcaster
DELETE /wallets/:walletIdDelete wallet (deprecated)
DELETE /environments/:environmentId/wallets/:walletIdDelete wallet
DELETE /users/:userIdDelete user (deprecated)
DELETE /environments/:environmentId/users/:userIdDelete user
POST /environments/:environmentId/usersCreate user
POST /environments/:environmentId/users/bulkBulk create users
PUT /users/:userIdUpdate user (deprecated)
PUT /environments/:environmentId/users/:userIdUpdate user
POST /users/:userId/sessions/revokeRevoke user sessions (deprecated)
POST /environments/:environmentId/users/:userId/sessions/revokeRevoke user sessions
PUT /sessions/:sessionId/revokeRevoke specific session
POST /environments/:environmentId/exportsCreate export

environment.settings.read

Description: Read environment configuration settings including global wallets, custom fields, gates, providers, and more.
Method & EndpointDescription
GET /environments/:environmentId/globalWallet/settingsGet global wallet settings
GET /environments/:environmentId/globalWallet/accessControlGet global wallet access control list
GET /environments/:environmentId/globalWallet/connectionsGet global wallet connections
GET /environments/:environmentId/nameService/:chainNameGet name service configuration by chain
GET /environments/:environmentId/test/accountGet test account
GET /environments/:environmentId/custom/hostnamesGet custom hostnames for environment
GET /environments/:environmentId/custom/fieldsGet custom fields for environment
GET /custom/fields/:customFieldIdGet custom field by ID
GET /environments/:environmentId/gatesGet environment gates
GET /environments/:environmentId/gates/:gateIdGet specific gate
GET /environments/:environmentId/settings/providersGet environment providers
GET /settings/providers/:providerIdGet specific provider
GET /environments/:environmentId/settings/exchangesGet environment exchanges
GET /settings/exchanges/:exchangeIdGet specific exchange
GET /environments/:environmentId/originsGet origins for environment
GET /environments/:environmentId/deeplinkUrlsGet deeplink URLs for environment
GET /environments/:environmentId/allowlistsGet allowlists for environment
GET /allowlists/:allowlistIdGet specific allowlist
GET /allowlists/:allowlistId/entriesGet allowlist entries
GET /environments/:environmentId/integrations/chainalysisGet Chainalysis configuration
GET /environments/:environmentId/sdkViewsGet SDK views
GET /environments/:environmentId/sdkViews/:viewTypeGet specific SDK view
GET /environments/:environmentId/waas/delegatedAccess/encryptionPublicKeysGet delegated access encryption public keys
GET /environments/:environmentId/waas/delegatedAccess/encryptionPublicKeys/:keyIdGet specific encryption public key
GET /environments/:environmentId/waas/policiesGet WaaS policies
GET /environments/:environmentId/waas/:walletIdGet wallet by wallet ID

environment.settings.write

Description: Create, update, and manage environment configuration settings including global wallets, custom fields, gates, providers, and more.
Method & EndpointDescription
POST /environments/:environmentId/globalWallet/settingsCreate global wallet settings
PUT /environments/:environmentId/globalWallet/settingsUpdate global wallet settings
PUT /environments/:environmentId/globalWallet/enableEnable global wallet
PUT /environments/:environmentId/globalWallet/disableDisable global wallet
POST /environments/:environmentId/globalWallet/accessControlCreate global wallet access control
PUT /environments/:environmentId/globalWallet/accessControlUpdate global wallet access control
PUT /environments/:environmentId/globalWallet/accessControl/enableEnable global wallet access control
PUT /environments/:environmentId/globalWallet/accessControl/disableDisable global wallet access control
POST /environments/:environmentId/globalWallet/accessControl/domainsAdd global wallet access control domain
DELETE /environments/:environmentId/globalWallet/accessControl/domains/:globalWalletAccessControlDomainIdDelete global wallet access control domain
POST /environments/:environmentId/nameService/:chainName/signingMessageFetch name service signing message
DELETE /environments/:environmentId/nameService/:chainNameDelete name service configuration
POST /environments/:environmentId/nameService/:chainNameCreate name service configuration
PUT /environments/:environmentId/nameService/:chainName/enableEnable name service
PUT /environments/:environmentId/nameService/:chainName/disableDisable name service
POST /environments/:environmentId/test/accountCreate test account
DELETE /environments/:environmentId/test/accountDelete test account
POST /environments/:environmentId/custom/hostnamesCreate custom hostname
DELETE /environments/:environmentId/custom/hostnames/:customHostnameIdDelete custom hostname
POST /environments/:environmentId/custom/fieldsCreate custom field
PUT /custom/fields/:customFieldIdUpdate custom field
DELETE /custom/fields/:customFieldIdDelete custom field
POST /environments/:environmentId/gatesCreate gate
PUT /environments/:environmentId/gates/:gateIdUpdate gate
DELETE /environments/:environmentId/gates/:gateIdDelete gate
PUT /environments/:environmentId/gates/:gateId/enableEnable gate
PUT /environments/:environmentId/gates/:gateId/disableDisable gate
POST /environments/:environmentId/settings/providersCreate provider
PUT /settings/providers/:providerIdUpdate provider
DELETE /settings/providers/:providerIdDelete provider
PUT /settings/providers/:providerId/enableEnable provider
PUT /settings/providers/:providerId/disableDisable provider
POST /environments/:environmentId/settings/exchangesCreate exchange
DELETE /settings/exchanges/:exchangeIdDelete exchange
PUT /settings/exchanges/:exchangeId/enableEnable exchange
PUT /settings/exchanges/:exchangeId/disableDisable exchange
POST /environments/:environmentId/originsCreate origin
DELETE /origins/:originIdDelete origin
POST /environments/:environmentId/deeplinkUrlsAdd deeplink URL
DELETE /deeplinkUrls/:deeplinkUrlIdDelete deeplink URL
POST /environments/:environmentId/allowlistsCreate allowlist
DELETE /allowlists/:allowlistIdDelete allowlist
PUT /allowlists/:allowlistId/enableEnable allowlist
PUT /allowlists/:allowlistIdUpdate allowlist
PUT /allowlists/:allowlistId/disableDisable allowlist
POST /allowlists/:allowlistId/entriesAdd allowlist entry
DELETE /allowlistEntries/:allowlistEntryIdDelete allowlist entry
PUT /environments/:environmentId/sdkViews/:viewTypeUpdate SDK view
DELETE /users/:userId/mfaReset all MFA devices for user
POST /users/:userId/mfa/resetReset user MFA
POST /environments/:environmentId/waas/policiesCreate WaaS policy
PUT /environments/:environmentId/waas/policiesUpdate WaaS policy
DELETE /environments/:environmentId/waas/policiesDelete WaaS policy rules
POST /environments/:environmentId/waas/delegatedAccess/encryptionPublicKeysCreate delegated access encryption public key