Klaviyo

Overview

Connect the application’s users to Klaviyo for email marketing, SMS, and customer data.

Property	Value
Provider ID	klaviyo
Category	Marketing
PKCE	Required (S256)
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Klaviyo OAuth App

Go to Klaviyo Manage Apps

Sign in to Klaviyo as an owner, admin, or manager and open Settings > Manage Apps.

Create an app

Click Create App and enter the app name.

Configure the redirect URL

Add the Alter callback URL (from the Developer Portal) to the app’s redirect URL allowlist.

Set scopes

Set the app’s scopes as a space-separated list. The scopes requested at authorization time must be part of the app’s configured scope set — scopes not configured on the app are ignored.

Get credentials

Copy the Client ID and Client Secret.

Warning

Never share the Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Klaviyo provider

Go to OAuth Providers > Add Provider > Klaviyo.

Enter credentials

• Client ID: Paste the Klaviyo Client ID
• Client Secret: Paste the Klaviyo Client Secret

Select scopes

Choose the scopes the application needs. accounts:read is required and selected by default.

Save

Click Save. The provider is now active.

Available Scopes

accounts:read is required and selected by default.

Scope	Description
accounts:read	Read account information such as the account ID and name
brands:read	Read the account’s brands
brands:write	Create, update, and delete brands
campaigns:read	Read campaigns and campaign performance data
campaigns:write	Create and update campaigns
catalogs:read	Read catalog items, categories, and variants
catalogs:write	Create and update catalog items, categories, and variants
conversations:read	Read conversations
conversations:write	Create and update conversations
coupons:read	Read coupons
coupons:write	Create and update coupons
custom-objects:read	Read custom objects and their records
custom-objects:write	Create, update, and delete custom objects and their records
coupon-codes:read	Read coupon codes
coupon-codes:write	Create and update coupon codes
data-privacy:read	Read data privacy requests
data-privacy:write	Create data privacy deletion requests
events:read	Read events and event metrics
events:write	Create events
flows:read	Read flows and flow performance data
flows:write	Create and update flows
forms:read	Read forms and form performance data
forms:write	Create, update, and delete sign-up forms
images:read	Read images
images:write	Upload and update images
lists:read	Read lists and list memberships
lists:write	Create and update lists and list memberships
metrics:read	Read metrics and metric aggregates
metrics:write	Create and update metrics
profiles:read	Read profiles, profile properties, and consent status
profiles:write	Create and update profiles and suppress or subscribe profiles
push-tokens:read	Read push tokens
push-tokens:write	Create and update push tokens
reviews:read	Read product reviews
reviews:write	Update reviews
segments:read	Read segments and segment memberships
segments:write	Create and update segments
sender-config:read	Read sending domains and sender settings
sender-config:write	Create, update, and delete sending domains and sender settings
subscriptions:read	Read subscription status
subscriptions:write	Subscribe and unsubscribe profiles
tags:read	Read tags and tag groups
tags:write	Create and update tags and tag groups
templates:read	Read email templates
templates:write	Create, update, and delete templates
tracking-settings:read	Read tracking settings
tracking-settings:write	Update tracking settings
translations:read	Read content translations
translations:write	Create, update, and delete content translations
usage:read	Read account usage data
web-feeds:read	Read web feeds
web-feeds:write	Create, update, and delete web feeds
webhooks:read	Read webhook subscriptions
webhooks:write	Create and update webhook subscriptions

Notes

• Klaviyo requires PKCE (S256) for all OAuth clients, including confidential ones. Alter Vault handles PKCE automatically.
• Tokens grant access to the Klaviyo account, not an individual user. Only owner, admin, and manager roles can authorize apps.
• Access tokens expire after 1 hour. The refresh token persists until the app is uninstalled, revoked, or unused for 90 days.
• Request the least permissive scope set — Klaviyo rejects Marketplace listings that request more permissions than necessary.
• See the Klaviyo OAuth documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path	Notes
assign_template_to_campaign_message	send	POST	/api/campaign-message-assign-template	—
cancel_campaign_send	delete, send	PATCH	/api/campaign-send-jobs/{id}	—
clone_campaign	send	POST	/api/campaign-clone	also accepts create_campaign_clone
clone_campaign_audience	send	POST	/api/campaign-audience-clone	—
clone_campaign_message	send	POST	/api/campaign-message-clone	—
create_campaign	send	POST	/api/campaigns	—
create_campaign_audience	send	POST	/api/campaign-audiences	—
create_campaign_message	send	POST	/api/campaign-messages	—
create_campaign_variation	send	POST	/api/campaign-variations	—
create_flow_action	send	POST	/api/flow-actions	—
create_template_preview_send_job	send	POST	/api/template-preview-send-jobs	—
publish_form	send, write	POST	/api/form-publish-jobs	—
schedule_campaign_message	send	POST	/api/campaign-message-schedule	—
send_campaign	send	POST	/api/campaign-send-jobs	—
update_campaign	send	PATCH	/api/campaigns/{id}	—
update_campaign_audience	send	PATCH	/api/campaign-audiences/{id}	—
update_campaign_message	send	PATCH	/api/campaign-messages/{id}	—
update_campaign_message_schedule	delete, send	PATCH	/api/campaign-message-schedule/{id}	—
update_campaign_variation	send	PATCH	/api/campaign-variations/{id}	—
update_image_for_campaign_message	send	PATCH	/api/campaign-messages/{id}/relationships/image	—
bulk_create_coupon_codes	payment	POST	/api/coupon-code-bulk-create-jobs	—
create_coupon	payment	POST	/api/coupons	—
create_coupon_code	payment	POST	/api/coupon-codes	—
delete_coupon	delete, payment	DELETE	/api/coupons/{id}	—
delete_coupon_code	delete, payment	DELETE	/api/coupon-codes/{id}	—
update_coupon	payment	PATCH	/api/coupons/{id}	—
update_coupon_code	payment	PATCH	/api/coupon-codes/{id}	—
delete_brand_button	delete	DELETE	/api/brand-buttons/{id}	—
delete_brand_color	delete	DELETE	/api/brand-colors/{id}	—
delete_brand_logo	delete	DELETE	/api/brand-logos/{id}	—
delete_brand_social_group	delete	DELETE	/api/brand-social-groups/{id}	—
delete_campaign	delete	DELETE	/api/campaigns/{id}	—
delete_campaign_audience	delete	DELETE	/api/campaign-audiences/{id}	—
delete_campaign_message	delete	DELETE	/api/campaign-messages/{id}	—
delete_campaign_variation	delete	DELETE	/api/campaign-variations/{id}	—
delete_catalog_category	delete	DELETE	/api/catalog-categories/{id}	—
delete_catalog_item	delete	DELETE	/api/catalog-items/{id}	—
delete_catalog_variant	delete	DELETE	/api/catalog-variants/{id}	—
delete_custom_metric	delete	DELETE	/api/custom-metrics/{id}	—
delete_data_source	delete	DELETE	/api/data-sources/{id}	—
delete_flow	delete	DELETE	/api/flows/{id}	—
delete_flow_action	delete	DELETE	/api/flow-actions/{id}	—
delete_form	delete	DELETE	/api/forms/{id}	—
delete_list	delete	DELETE	/api/lists/{id}	—
delete_translation	delete	DELETE	/api/translations/{id}	—
create_client_push_token	admin, write	POST	/client/push-tokens	—
create_push_token	admin, write	POST	/api/push-tokens	—
create_tag_group	admin, write	POST	/api/tag-groups	—
create_text_messaging_configuration	admin, write	POST	/api/text-messaging-configurations	—
create_text_messaging_sender	admin, write	POST	/api/text-messaging-senders	—
create_text_messaging_sender_registration	admin, write	POST	/api/text-messaging-sender-registrations	—
create_webhook	admin, write	POST	/api/webhooks	—
update_tag_group	admin, write	PATCH	/api/tag-groups/{id}	—
add_profiles_to_list	write	POST	/api/lists/{id}/relationships/profiles	—
bulk_create_catalog_categories	write	POST	/api/catalog-category-bulk-create-jobs	—
bulk_create_catalog_items	write	POST	/api/catalog-item-bulk-create-jobs	—
bulk_create_catalog_variants	write	POST	/api/catalog-variant-bulk-create-jobs	—
bulk_create_client_events	write	POST	/client/event-bulk-create	—
bulk_create_data_source_records	write	POST	/api/data-source-record-bulk-create-jobs	—
bulk_create_events	write	POST	/api/event-bulk-create-jobs	—
clone_universal_content	write	POST	/api/template-universal-content-clone	—
create_brand_button	write	POST	/api/brand-buttons	—
create_brand_color	write	POST	/api/brand-colors	—
create_brand_logo	write	POST	/api/brand-logos	—
create_brand_social_group	write	POST	/api/brand-social-groups	—
create_template_conversion_job	write	POST	/api/template-conversion-jobs	—
create_translation	write	POST	/api/translations	—
unpublish_form	write	POST	/api/form-unpublish-jobs	—
update_brand_button	write	PATCH	/api/brand-buttons/{id}	—
update_brand_color	write	PATCH	/api/brand-colors/{id}	—
update_brand_email_default	write	PATCH	/api/brand-email-defaults/{id}	—
update_brand_logo	write	PATCH	/api/brand-logos/{id}	—
update_brand_social_group	write	PATCH	/api/brand-social-groups/{id}	—
update_brand_voice	write	PATCH	/api/brand-voice/{id}	—
update_form	write	PATCH	/api/forms/{id}	—
update_profile	write	PATCH	/api/profiles/{id}	—
update_translation	write	PATCH	/api/translations/{id}	—
get_action_for_flow_message	read	GET	/api/flow-messages/{id}/flow-action	—
get_action_id_for_flow_message	read	GET	/api/flow-messages/{id}/relationships/flow-action	—
get_bulk_create_catalog_items_job	read	GET	/api/catalog-item-bulk-create-jobs/{job_id}	—
get_bulk_create_categories_job	read	GET	/api/catalog-category-bulk-create-jobs/{job_id}	—
get_bulk_create_coupon_codes_job	read	GET	/api/coupon-code-bulk-create-jobs/{job_id}	—
get_bulk_create_variants_job	read	GET	/api/catalog-variant-bulk-create-jobs/{job_id}	—