Canonical URL: https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/ --- description: A September 30 change keeps financial-action tools available through merchants’ own API keys while withdrawing access from external OAuth applications. title: Magistry removes gift-card issuance from third-party OAuth access image: https://giftcard.news/images/social/v1/magistry-removes-gift-card-issuance-third-party-oauth-access-6e1d8249702a9cca58f62f534fcaaf38.jpg --- 1. [Home](https://giftcard.news/) 2. [Payments & Technology](https://giftcard.news/payments-technology/) # Magistry removes gift-card issuance from third-party OAuth access A September 30 change keeps financial-action tools available through merchants’ own API keys while withdrawing access from external OAuth applications. By [Oliver Reed](https://giftcard.news/author/oliver-reed/) September 30, 2026 3 min read [ Google News ](https://google.com/preferences/source?q=giftcard.news&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Magistry+removes+gift-card+issuance+from+third-party+OAuth+access&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Magistry+removes+gift-card+issuance+from+third-party+OAuth+access+https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") ![Magistry Pulse mobile dashboard showing store revenue and order metrics](https://giftcard.news/images/variants/v1/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard-w1222.webp) Magistry’s Pulse dashboard. Product context screenshot, rather than an image of the changed OAuth permissions. Photo: Magistry [Magistry](https://giftcard.news/company/magistry/) has withdrawn gift-card issuance tools from third-party applications connecting through OAuth, according to a September 30 entry in its official shipping log. The tools remain available through merchants' own API keys. The same restriction covers tools that create refunds or cancel orders, the company says. ## The access restriction within the published operation registry Magistry groups its API into reads, automatic writes and proposed writes. Its developer page publishes 105, 44 and 34 operations in those groups respectively, counted on October 19\. These categories explain why an integration needs to distinguish access to information from permission to execute or propose a change; they do not establish that every listed operation is available to every external application. [\[S02\]](https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article-source-2) [\[S03\]](https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article-source-3) The data behind the story ### Magistry publishes a registry breakdown by operation tier The developer page explicitly reports these counts for October 19, 2026, across its whole MCP and REST registry. Published registry operations operations Tap or hover for details. All values are also available in the data table. Source Magistry developer platform, counted October 19, 2026 Vendor-published inventory counts, not counts constructed from release-note bullets. They cover the whole registry and do not show how many tools a third-party credential can reach, how many issue gift cards, or whether the September change reduced incidents. Show data tableHide data table Scroll left or right to see all columns __Magistry publishes a registry breakdown by operation tier (operations)__ | Category | Published registry operations | | --------------- | ----------------------------- | | Read | 105 operations | | Automatic write | 44 operations | | Proposed write | 34 operations | The September 30 announcement described a restriction on the route through which an external application could trigger a financial action Your free reader account ## Continue reading for free. Create your account or sign in to get unlimited access. Continue with LinkedIn Continue with Google Continue with Facebook No payment required. Newsletter signup is optional. [Already registered? Sign in](https://giftcard.news/login/?returnTo=%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F) ## In this article ### Companies * [Magistry](https://giftcard.news/company/magistry/) ### Sources and documents * [Original September 30 shipped access-control change](https://www.magistry.io/learn/changelog?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news#money-related-tools-are-now-protected-from-third-party-oauth) — Magistry * [\[S02\] Published operation counts by permission tier](https://www.magistry.io/platform/developers?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Magistry * [\[S03\] API authorization and approval documentation](https://www.magistry.io/support/api?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Magistry * [\[S04\] Public current OpenAPI contract](https://app.magistry.io/api/v1/openapi.json?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Magistry * [\[S05\] Platform listing and requested data access](https://apps.shopify.com/magistry?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Shopify App Store Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Magistry+removes+gift-card+issuance+from+third-party+OAuth+access&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Magistry+removes+gift-card+issuance+from+third-party+OAuth+access+https%3A%2F%2Fgiftcard.news%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") ![Portrait of Oliver Reed](https://giftcard.news/images/variants/v1/oliver-reed-editorial-portrait-w320.webp) About the author ## [Oliver Reed](https://giftcard.news/author/oliver-reed/) Journalist — Industry Deals & Research Oliver Reed covers industry acquisitions, investment and market research for Gift Card News. From reading to building ## Your next move in gift cards. Tell us what you’re building. We’ll help you explore suitable providers. [Find a provider ](https://giftcard.news/find-a-provider/) ## Related articles [Payments & Technology](https://giftcard.news/payments-technology/) News ### [PhonePe turns Indus Appstore into a browser-accessible gift-card marketplace](https://giftcard.news/payments-technology/phonepe-appstore-browser-gift-card-marketplace/) [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 28, 2026 3 min [Payments & Technology](https://giftcard.news/payments-technology/) News ### [Square builds gift-card scanning into new restaurant kiosk](https://giftcard.news/payments-technology/square-kiosk-built-in-gift-card-scanning-franchise-management/) [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 14, 2026 3 min [Payments & Technology](https://giftcard.news/payments-technology/) News ### [Steam Japan wallet report contrasts expiry clause with support response](https://giftcard.news/payments-technology/steam-japan-wallet-expiry-clause-support-clarification-report/) [Maya Bennett](https://giftcard.news/author/maya-bennett/) October 9, 2026 2 min ```json {"@context":"https://schema.org","@graph":[{"@type":"NewsMediaOrganization","@id":"https://giftcard.news/#publisher","name":"Gift Card News","url":"https://giftcard.news/","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","logo":{"@type":"ImageObject","url":"https://giftcard.news/icon-512.png","contentUrl":"https://giftcard.news/icon-512.png","width":512,"height":512,"@id":"https://giftcard.news/#logo"},"publishingPrinciples":"https://giftcard.news/editorial-policy/","correctionsPolicy":"https://giftcard.news/editorial-policy/"},{"@type":"WebSite","@id":"https://giftcard.news/#website","url":"https://giftcard.news/","name":"Gift Card News","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","inLanguage":"en","publisher":{"@id":"https://giftcard.news/#publisher"},"potentialAction":{"@type":"SearchAction","target":"https://giftcard.news/search/?q={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"Person","@id":"https://giftcard.news/author/oliver-reed/#person","name":"Oliver Reed","url":"https://giftcard.news/author/oliver-reed/","description":"Oliver Reed covers industry acquisitions, investment and market research for Gift Card News.","jobTitle":"Journalist — Industry Deals & Research","image":{"@type":"ImageObject","url":"https://giftcard.news/images/oliver-reed-editorial-portrait.webp","contentUrl":"https://giftcard.news/images/oliver-reed-editorial-portrait.webp","width":1254,"height":1254,"caption":"Illustrated portrait representing the Oliver Reed editorial profile.","@id":"https://giftcard.news/images/oliver-reed-editorial-portrait.webp#image","encodingFormat":"image/webp","description":"Illustrated portrait for Oliver Reed, Gift Card News","creditText":"Gift Card News / AI-generated illustration"}},{"@type":"ImageObject","url":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp","contentUrl":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp","width":1222,"height":1920,"caption":"Magistry’s Pulse dashboard. Product context screenshot, rather than an image of the changed OAuth permissions.","@id":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp#image","encodingFormat":"image/webp","description":"Magistry Pulse mobile dashboard showing store revenue and order metrics","creditText":"Magistry","isBasedOn":"https://www.magistry.io/"},{"@type":"Dataset","@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#dataset","url":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/","name":"Magistry removes gift-card issuance from third-party OAuth access: figure data","description":"Tabular data for the figures accompanying \"Magistry removes gift-card issuance from third-party OAuth access\". Sources, units and limitations are documented with each figure.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article"},"isAccessibleForFree":false,"hasPart":[{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article-figure-1-dataset"}],"distribution":{"@type":"DataDownload","contentUrl":"https://giftcard.news/download.csv?article=%2Fpayments-technology%2Fmagistry-gift-card-issuance-third-party-oauth-access-restriction%2F","encodingFormat":"text/csv","isAccessibleForFree":false}},{"@type":"Dataset","@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article-figure-1-dataset","url":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article-figure-1","name":"Magistry publishes a registry breakdown by operation tier","description":"Tabular values displayed in the figure \"Magistry publishes a registry breakdown by operation tier\" and its accompanying data table.\n\nThe developer page explicitly reports these counts for October 19, 2026, across its whole MCP and REST registry.\n\nVendor-published inventory counts, not counts constructed from release-note bullets. They cover the whole registry and do not show how many tools a third-party credential can reach, how many issue gift cards, or whether the September change reduced incidents.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#dataset"},"isAccessibleForFree":true,"variableMeasured":[{"@type":"PropertyValue","name":"Published registry operations","unitText":"operations"}],"isBasedOn":[{"@type":"CreativeWork","name":"Magistry developer platform, counted October 19, 2026","url":"https://www.magistry.io/platform/developers"}]},{"@type":"NewsArticle","@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article","url":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/","headline":"Magistry removes gift-card issuance from third-party OAuth access","description":"A September 30 change keeps financial-action tools available through merchants’ own API keys while withdrawing access from external OAuth applications.","datePublished":"2026-09-30T00:00:00.000Z","dateModified":"2026-10-19T19:44:16.164Z","inLanguage":"en","mainEntityOfPage":{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#webpage"},"isPartOf":{"@id":"https://giftcard.news/#website"},"isAccessibleForFree":false,"hasPart":[{"@type":"WebPageElement","isAccessibleForFree":false,"cssSelector":".reader-restricted"},{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#dataset"}],"image":[{"@type":"ImageObject","url":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp","contentUrl":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp","width":1222,"height":1920,"caption":"Magistry’s Pulse dashboard. Product context screenshot, rather than an image of the changed OAuth permissions.","@id":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp#image","encodingFormat":"image/webp","description":"Magistry Pulse mobile dashboard showing store revenue and order metrics","creditText":"Magistry","isBasedOn":"https://www.magistry.io/"}],"articleSection":"Payments & Technology","keywords":["Magistry"],"mentions":[{"@type":"Organization","@id":"https://giftcard.news/company/magistry/#entity","name":"Magistry","url":"https://giftcard.news/company/magistry/"}],"wordCount":447,"citation":[{"@type":"CreativeWork","name":"Original September 30 shipped access-control change","url":"https://www.magistry.io/learn/changelog#money-related-tools-are-now-protected-from-third-party-oauth","publisher":{"@type":"Organization","name":"Magistry"}},{"@type":"CreativeWork","name":"[S02] Published operation counts by permission tier","url":"https://www.magistry.io/platform/developers","publisher":{"@type":"Organization","name":"Magistry"}},{"@type":"CreativeWork","name":"[S03] API authorization and approval documentation","url":"https://www.magistry.io/support/api","publisher":{"@type":"Organization","name":"Magistry"}},{"@type":"CreativeWork","name":"[S04] Public current OpenAPI contract","url":"https://app.magistry.io/api/v1/openapi.json","publisher":{"@type":"Organization","name":"Magistry"}},{"@type":"CreativeWork","name":"[S05] Platform listing and requested data access","url":"https://apps.shopify.com/magistry","publisher":{"@type":"Organization","name":"Shopify App Store"}}],"author":[{"@id":"https://giftcard.news/author/oliver-reed/#person"}],"publisher":{"@id":"https://giftcard.news/#publisher"}},{"@type":"WebPage","@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#webpage","url":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/","name":"Magistry removes gift-card issuance from third-party OAuth access","description":"A September 30 change keeps financial-action tools available through merchants’ own API keys while withdrawing access from external OAuth applications.","datePublished":"2026-09-30T00:00:00.000Z","dateModified":"2026-10-19T19:44:16.164Z","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/#website"},"mainEntity":{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#article"},"breadcrumb":{"@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#breadcrumbs"},"primaryImageOfPage":{"@id":"https://giftcard.news/images/magistry-removes-gift-card-issuance-third-party-oauth-access-pulse-mobile-dashboard.webp#image"}},{"@type":"BreadcrumbList","@id":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/#breadcrumbs","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://giftcard.news/"},{"@type":"ListItem","position":2,"name":"Payments & Technology","item":"https://giftcard.news/payments-technology/"},{"@type":"ListItem","position":3,"name":"Magistry removes gift-card issuance from third-party OAuth access","item":"https://giftcard.news/payments-technology/magistry-gift-card-issuance-third-party-oauth-access-restriction/"}]}]} ```