Permissions

WingCash uses a system of permissions for access control. Apps can do no more than what the authenticated profile can do. Apps are further limited by the permissions granted to the app during the Authorization Flow.

The following profile permissions are defined for the WingCash API.

public
Access public information about the authenticated profile. All access tokens have this permission implicitly.
mobile_device
Access WingCash from a mobile device. If your app requests the mobile_device permission, WingCash will issue a device-specific access token. (If your app does not request the mobile_device permission but uses access tokens from different devices, the devices will probably conflict with each other and invalidate each other’s access tokens.)
offline

Extend the duration of the access token so it can be used even when the authenticated profile is not logged in to WingCash.

Note

The offline permission has no effect when the mobile_device permission is also requested. Mobile devices should never request a long lived token.

select_profile
Access other profiles managed by the authenticated personal profile, especially business profiles. If your app does not request this permission and the personal profile manages at least one other profile, the authorization flow will ask the user to choose which profile to use with your app. Used in Token API Calls.
email
List the registered email addresses of the authenticated profile. This permission is required for sending cash to other email addresses. Used in Wallet API Calls.
view_wallet
Read the contents of the authenticated profile’s wallet. Used in Wallet API Calls.
view_history
Read the authenticated profile’s transaction history. Used in Transfer API Calls.
view_full_history
View distribution details in transfers. Used in Transfer API Calls.
change_settings
Change the authenticated profile’s personal settings like the password or login information.
list_friends
List and search the authenticated profile’s friends on WingCash and on linked social networks. Used in Wallet API Calls.
send_to_account
Send cash to the authenticated profile’s bank or credit union. Used in Wallet API Calls.
send_cash
Send cash from the authenticated profile’s wallet. Used in Wallet API Calls.
receive_cash
Receive a payment using a payment code. Used in Wallet API Calls.
manage_sent
Manage transfers the authenticated profile has sent. Used in Transfer API Calls.
manage_received
Manage transfers the authenticated profile has received. Used in Transfer API Calls.
track_campaign
Track campaign events. Used in Campaign API Calls.
accept_offer
Accept (purchase) an offer. Used in Offer API Calls.
preview_offer
Get information about the offers the authenticated profile can preview. Used in Offer API Calls.
view_design
View cash designs. Used in Cash Design API Calls.
view_design_network
See all cash design network members. Used in Cash Design API Calls.
edit_design
Edit cash designs. Used in Cash Design API Calls.
apply_design
Create and send cash. Used in Cash Design API Calls.
add_agreement
Add a member agreement to a cash network. Used in Cash Design API Calls.
activate_agreement
Activate a cash network member agreement. Used in Cash Design API Calls.
deactivate_agreement
Deactivate a cash network member agreement. Used in Cash Design API Calls.
remove_agreement
Remove a cash network member agreement. Used in Cash Design API Calls.
pull_payment
Pull redemption payments from customers. Used in Pull API Calls.
process_payment
Process payments as a third party. Used in Payment Processor API Calls.

App Permissions

WingCash assigns certain permissions to apps rather than profiles. These permissions allow apps to create and manage profiles in a specific site. To get these permissions for your app, please contact WingCash.

create_profile
Add individual or business profiles to WingCash. See the Profile Access API Calls.
get_profile
Look up information about a profile. See the Profile Access API Calls.
control_profile
Get an access token for controlling a profile. See the Profile Access API Calls.
get_fund_proxy
Get or create funding proxies. See the Funding Proxy API Calls.