Skip to main content
Connect to Coinbase’s 100M+ users without sharing their credentials. With OAuth2, users can securely authorize your app to access their accounts, send payments, and trade crypto.
New OAuth client creation is temporarily disabled. Existing clients will continue to work normally.

How it works

EndpointPurpose
login.coinbase.com/oauth2/authUser authorization
login.coinbase.com/oauth2/tokenToken exchange & refresh
login.coinbase.com/oauth2/revokeDisconnect user (optional)

Before you integrate

Plan your scopes upfront. Scopes must be declared when registering your OAuth application and are difficult to change later. Adding scopes after launch requires users to re-authorize. See Scopes for the full list.
Implement PKCE for security. We strongly recommend implementing PKCE (Proof Key for Code Exchange) in your OAuth2 flow, especially for mobile and single-page applications.

When to use OAuth2

I want to…Use
Access other users’ Coinbase accountsOAuth2 (this guide)
Access my own CDP resources (server wallets, etc.)CDP API Keys
Access my own Coinbase accountCoinbase App API Keys
Use a legacy OAuth 1.0 integrationOAuth2 — OAuth 1.0 endpoints are deprecated
OAuth2 is specifically for third-party applications that need to access Coinbase consumer accounts on behalf of users. If you’re building server-side automation for your own account, use API keys instead.

Use cases

Payouts to Coinbase users

Send payments directly to users’ Coinbase accounts—payroll, creator payments, rewards. Required scopes: wallet:accounts:read, wallet:transactions:send

Pay with Coinbase

Let users pay for goods and services using their Coinbase balance. Required scopes: wallet:accounts:read, wallet:transactions:send

Trading integration

Allow users to trade crypto directly from your platform using their Coinbase account. Required scopes: wallet:accounts:read, wallet:trades:create, wallet:trades:read