roles
Boya API
Bills · Manage
Bills · Payments
Bills · Approval workflows
Bills · Budgets & setup
Bills · Attachments
payments
approvals
fx
Expenses · Retrieve
Expenses · Review & approvals
Expenses · Reports
Expenses · Exports
Cards · Manage
Cards · Controls
Cards · Single-use
Cards · Physical cards
Cards · Authorization
subscriptions
tags
transactions
accounts
categories
taxes
vendors
customers
employees
teams
Investments · Portfolio & accounts
Investments · Fund movements
Investments · Access & permissions
business-policies
Wallet policies · Policies
Wallet policies · Permissions
Wallet policies · Access checks
Wallet policies · Audit
audit-trail
🔒 Private label — contact sales. Requires a private-label entitlement on your API client.
list all permissions
Security
oauth2ClientCredentials(Required scopes: roles:read)
- Mock serverhttps://developer.boyahq.com/_mock/v2/openapi/permissions
- Productionhttps://api.boyahq.com/v2/permissions
- Sandboxhttps://sandbox.api.boyahq.com/v2/permissions
curl -i -X GET \
https://developer.boyahq.com/_mock/v2/openapi/permissions \
-H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
-H 'business_id: string'Response
{ "status": 200, "data": [ { … } ], "timestamp": "2026-01-08T12:07:27.605Z" }