@lunch-money/developer-docs 2.11.1-preview.9 → 2.11.1

package/v2/spec/lunch-money-api-v2.yaml

@@ -5099,58 +5099,9 @@ components:
     bearerSecurity:
       type: http
       description: >-
-        A Lunch Money personal access token. Required for the LIVE server and
-        optional for MOCK.
+        Required for the LIVE server. Optional for MOCK.
       scheme: bearer
       bearerFormat: JWT
-    oauth2Security:
-      type: oauth2
-      description: >-
-        An OAuth 2.0 access token issued to a registered Lunch Money app.
-        Each operation lists the scope required to call it.
-      flows:
-        authorizationCode:
-          authorizationUrl: https://api.lunchmoney.dev/oauth/authorize
-          tokenUrl: https://api.lunchmoney.dev/oauth/token
-          scopes:
-            offline_access: "Allow this app to maintain access without asking you to sign in and authorize it again"
-            me:read: "View your Lunch Money identity and account, user, and budget settings"
-            me:update: "Update your Lunch Money account, user, and budget settings"
-            summary:read: "View your budget summary"
-            categories:read: "View categories and category groups"
-            categories:create: "Create categories and category groups"
-            categories:update: "Update categories and category groups"
-            categories:delete: "Delete categories and category groups"
-            crypto_manual:read: "View supported cryptocurrencies and manually managed cryptocurrency balances"
-            crypto_manual:create: "Add supported cryptocurrencies and create manually managed cryptocurrency balances"
-            crypto_manual:update: "Update manually managed cryptocurrency balances"
-            crypto_manual:delete: "Delete manually managed cryptocurrency balances"
-            crypto_synced:read: "View synced cryptocurrency accounts and balances"
-            crypto_synced:update: "Refresh balances for synced cryptocurrency accounts"
-            balance_history:read: "View balance history for accounts and synced cryptocurrency balances"
-            balance_history:update: "Create or update balance history and details for deleted accounts"
-            balance_history:delete: "Delete balance history for accounts and synced cryptocurrency balances"
-            manual_accounts:read: "View manually managed accounts"
-            manual_accounts:create: "Create manually managed accounts"
-            manual_accounts:update: "Update manually managed accounts"
-            manual_accounts:delete: "Delete manually managed accounts"
-            plaid_accounts:read: "View accounts connected through Plaid"
-            plaid_accounts:update: "Request a Plaid account refresh, which may import new transactions"
-            transactions:read: "View transactions, including split and group information and attachment metadata"
-            transactions:create: "Create transactions"
-            transactions:update: "Update, split, unsplit, group, and ungroup transactions"
-            transactions:delete: "Delete transactions"
-            transaction_attachments:read: "Get download access to transaction attachments"
-            transaction_attachments:create: "Attach files to transactions"
-            transaction_attachments:delete: "Delete transaction attachments"
-            tags:read: "View tags"
-            tags:create: "Create tags"
-            tags:update: "Update tags"
-            tags:delete: "Delete tags"
-            recurring_items:read: "View recurring items"
-            budgets:read: "View budget period settings"
-            budgets:update: "Create or update budget amounts"
-            budgets:delete: "Delete budget amounts"
 
 paths:
   /me:
@@ -5169,10 +5120,6 @@ paths:
         Properties such as `primary_currency` and `budget_name` remain on this
         response for backwards compatibility.
       operationId: getMe
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:read
       parameters: []
       responses:
         "200":
@@ -5204,10 +5151,6 @@ paths:
         Returns settings for the current budgeting account. These settings apply
         regardless of which user is accessing the account.
       operationId: getAccountSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:read
       responses:
         "200":
           description: Account settings for the current budgeting account
@@ -5243,10 +5186,6 @@ paths:
         provide only the properties to update. The request body must include at
         least one property.
       operationId: updateAccountSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:update
       requestBody:
         required: true
         content:
@@ -5290,10 +5229,6 @@ paths:
         These settings apply across every budgeting account the user owns or
         collaborates on.
       operationId: getUserSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:read
       responses:
         "200":
           description: User settings for the authorized user
@@ -5331,10 +5266,6 @@ paths:
         Amount fields in API responses always use positive values for debits and
         negative values for credits.
       operationId: updateUserSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:update
       requestBody:
         required: true
         content:
@@ -5380,10 +5311,6 @@ paths:
         budgeting account. These settings do not affect other users or the
         authorized user's settings in other budgeting accounts.
       operationId: getUserAccountSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:read
       responses:
         "200":
           description: Settings for the authorized user in the current budgeting
@@ -5413,10 +5340,6 @@ paths:
         provide only the properties to update. The request body must include at
         least one property.
       operationId: updateUserAccountSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - me:update
       requestBody:
         required: true
         content:
@@ -5471,10 +5394,6 @@ paths:
         budget objects.
       
       operationId: getBudgetSummary
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - summary:read
       parameters:
         - in: query
           name: start_date
@@ -5990,10 +5909,6 @@ paths:
       description: Retrieve a list of all categories associated with the user's
         account.
       operationId: getAllCategories
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - categories:read
       parameters:
         - name: format
           in: query
@@ -6241,10 +6156,6 @@ paths:
         this case, the `children` attribute may be set to an array of category
         IDs to add to the newly created category group.
       operationId: createCategory
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - categories:create
       requestBody:
         required: true
         content:
@@ -6350,10 +6261,6 @@ paths:
       description: Retrieve details of a specific category or category group by
         its ID.
       operationId: getCategoryById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - categories:read
       parameters:
         - name: id
           in: path
@@ -6492,10 +6399,6 @@ paths:
 
         It is possible to modify the children of an existing category group with this API by setting the `children` attribute. If this is set, it will replace the existing children with the newly specified children. If the intention is to add or remove a single category, it is more straightforward to update the child category by specifying the new `group_id` attribute. If the goal is to add multiple new children or remove multiple existing children, it is recommended to first call the `GET /categories/{id}` endpoint to get the existing children and then modify the list as desired.<br><br>
       operationId: updateCategory
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - categories:update
       parameters:
         - name: id
           in: path
@@ -6648,10 +6551,6 @@ paths:
         recurring items, etc. If there are dependents, this endpoint will return
         an object that describes the number and type of existing dependencies.
       operationId: deleteCategory
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - categories:delete
       parameters:
         - in: path
           name: id
@@ -6735,10 +6634,6 @@ paths:
         Retrieve the list of cryptocurrencies currently supported for manual tracking.<p>
         When creating a new manual crypto balance via `POST /crypto/manual`, the `symbol` you specify must match the `symbol` of one of the entries returned by this endpoint.
       operationId: getAllCryptocurrencies
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:read
       responses:
         "200":
           description: A list of supported cryptocurrencies
@@ -6775,10 +6670,6 @@ paths:
         - crypto-manual
       summary: Add a new supported cryptocurrency
       operationId: createCryptocurrency
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:create
       description: |-
         Adds a new cryptocurrency to the supported manual-crypto list.<br><br>
         Lunch Money uses [CoinGecko](https://www.coingecko.com/us/coins/ethereum) to convert crypto balances to the user's primary currency. Users add a new supported cryptocurrency by submitting a CoinGecko coin-page URL. The server validates the URL, extracts the id from `/coins/{id}`, checks for an existing supported `coingecko_id`, validates the id against CoinGecko, then confirms the resolved symbol is not already supported before creating the new entry.
@@ -6863,10 +6754,6 @@ paths:
       description: |-
         Retrieve all manually managed crypto balances associated with the user's account.
       operationId: getAllCryptoManual
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:read
       responses:
         "200":
           description: A list of manual crypto balances
@@ -6903,10 +6790,6 @@ paths:
         Create a manually managed crypto asset.<br><br>
         If `display_name` is `null`, clients may derive one from `institution_name` + `name`.
       operationId: createCryptoManual
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:create
       requestBody:
         required: true
         content:
@@ -6993,10 +6876,6 @@ paths:
       description: |-
         Retrieve a single manually managed crypto balance by ID.
       operationId: getCryptoManualById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:read
       parameters:
         - name: id
           in: path
@@ -7067,10 +6946,6 @@ paths:
         Modify a manually managed crypto balance.<br><br>
         You may submit the response from `GET /crypto/manual/{id}` as the request body. System-defined properties are accepted according to the `x-updatable` metadata in the update schema.
       operationId: updateCryptoManual
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:update
       parameters:
         - name: id
           in: path
@@ -7169,10 +7044,6 @@ paths:
       description: |-
         Delete a single manually managed crypto asset by ID.<p> If this crypto asset has a balance history, and you do not explicitly set the query parameter`keep_history`, a 422 response will be returned requesting you to explicitly set `keep_history` to `true` or `false`.
       operationId: deleteCryptoManual
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_manual:delete
       parameters:
         - name: id
           in: path
@@ -7239,10 +7110,6 @@ paths:
       description: |-
         Retrieves all synced crypto accounts associated with the user's account.
       operationId: getAllCryptoSynced
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_synced:read
       responses:
         "200":
           description: A list of synced crypto accounts
@@ -7306,10 +7173,6 @@ paths:
       description: |-
         Retrieves the synced crypto account and all nested balances for the specified synced crypto account ID.
       operationId: getCryptoSyncedById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_synced:read
       parameters:
         - name: id
           in: path
@@ -7391,10 +7254,6 @@ paths:
       description: |-
         Retrieves a single balance from the specified synced crypto account using the crypto symbol.
       operationId: getCryptoSyncedBalanceBySymbol
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_synced:read
       parameters:
         - name: id
           in: path
@@ -7475,10 +7334,6 @@ paths:
       description: |-
         Trigger a balance refresh for the specified synced crypto account. Returns the refreshed synced crypto account.
       operationId: refreshCryptoSynced
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - crypto_synced:update
       parameters:
         - name: id
           in: path
@@ -7559,10 +7414,6 @@ paths:
         &nbsp;&nbsp;&nbsp;&nbsp;- `crypto_manual`: `source.crypto_manual_id` with [GET /crypto/manual/{id}](#tag/crypto-manual/GET/crypto/manual/{id})<br>
         &nbsp;&nbsp;&nbsp;&nbsp;- `crypto_synced`: `source.crypto_synced_id` and `source.symbol` with [GET /crypto/synced/{id}/{symbol}](#tag/crypto-synced/GET/crypto/synced/{id}/{symbol})
       operationId: getBalanceHistory
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:read
       parameters:
         - name: start_month
           in: query
@@ -7818,10 +7669,6 @@ paths:
         The `account_type` path parameter identifies the account family (`manual`, `plaid`, `crypto_manual`, or `deleted`) and `account_id` identifies the account within that family.<br><br>
         `start_month`, `end_month`, and current-month entries behave as described in [GET /balance_history](#tag/balance-history/GET/balance_history).
       operationId: getBalanceHistoryForAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:read
       parameters:
         - name: account_type
           in: path
@@ -7958,10 +7805,6 @@ paths:
         `crypto_balance` may be provided for `crypto_manual` and `deleted` accounts. It is invalid for `manual` or `plaid` accounts.<br><br>
         The response contains only the `type: historical` balance entries that were submitted in this request.
       operationId: upsertBalanceHistoryForAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:update
       parameters:
         - name: account_type
           in: path
@@ -8158,10 +8001,6 @@ paths:
       description: |-
         Delete all historical balance entries for a single manual, Plaid, manual crypto, or deleted account. For synced crypto symbol streams, use [DELETE /balance_history/crypto_synced/{account_id}/{symbol}](#tag/balance-history/DELETE/balance_history/crypto_synced/{account_id}/{symbol}).
       operationId: deleteBalanceHistoryForAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:delete
       parameters:
         - name: account_type
           in: path
@@ -8208,10 +8047,6 @@ paths:
         The path selects one balance stream with a synced crypto account id and `symbol`.<br><br>
         `start_month`, `end_month`, and current-month entries behave as described in [GET /balance_history](#tag/balance-history/GET/balance_history).
       operationId: getBalanceHistoryForCryptoSynced
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:read
       parameters:
         - name: account_id
           in: path
@@ -8320,10 +8155,6 @@ paths:
         `crypto_balance` may be provided for synced crypto balances.<br><br>
         The response contains only the `type: historical` balance entries that were submitted in this request.
       operationId: upsertBalanceHistoryForCryptoSynced
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:update
       parameters:
         - name: account_id
           in: path
@@ -8468,10 +8299,6 @@ paths:
         Delete all historical balance entries for a single synced crypto symbol stream.<br><br>
         The path identifies both the synced crypto account and the symbol whose history should be deleted.
       operationId: deleteBalanceHistoryForCryptoSynced
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:delete
       parameters:
         - name: account_id
           in: path
@@ -8515,10 +8342,6 @@ paths:
       description: |-
         Delete a single stored (`type: historical`) monthly balance history entry by its id. Ephemeral `current` entries cannot be deleted this way.
       operationId: deleteBalanceHistoryEntry
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:delete
       parameters:
         - name: id
           in: path
@@ -8565,10 +8388,6 @@ paths:
         Update archived metadata for a deleted balance history source.<br><br>
         Pass the `deleted_account_id` from a `source.type: deleted` entry. The update applies to all historical entries associated with that deleted source.
       operationId: updateBalanceHistoryDetails
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - balance_history:update
       parameters:
         - name: account_id
           in: path
@@ -8640,10 +8459,6 @@ paths:
       description: Retrieve a list of all manually-managed accounts associated
         with the user's account.
       operationId: getAllManualAccounts
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - manual_accounts:read
       responses:
         "200":
           description: A list of manual accounts
@@ -8719,10 +8534,6 @@ paths:
       summary: Create a manual account
       description: Create a new manually-managed account.
       operationId: createManualAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - manual_accounts:create
       requestBody:
         required: true
         content:
@@ -8857,10 +8668,6 @@ paths:
       description: Retrieve the details of the manual account with the specified
         ID.
       operationId: getManualAccountById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - manual_accounts:read
       parameters:
         - name: id
           in: path
@@ -8945,10 +8752,6 @@ paths:
         properties that is not listed above. For example a request body that contains only a `name` property is valid.<br><br>
 
       operationId: updateManualAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - manual_accounts:update
       parameters:
         - name: id
           in: path
@@ -9092,10 +8895,6 @@ paths:
         property set to this account's ID they will appear with a warning when
         displayed in the web view.
       operationId: deleteManualAccount
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - manual_accounts:delete
       parameters:
         - in: path
           name: id
@@ -9155,10 +8954,6 @@ paths:
       description: Retrieve a list of all synced accounts associated with the
         user's account.
       operationId: getAllPlaidAccounts
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - plaid_accounts:read
       responses:
         "200":
           description: A list of accounts synced via Plaid
@@ -9265,10 +9060,6 @@ paths:
       description: Retrieve the details of the plaid account with the specified
         ID.
       operationId: getPlaidAccountById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - plaid_accounts:read
       parameters:
         - name: id
           in: path
@@ -9366,10 +9157,6 @@ paths:
         contacts the associated financial institution. The `last_import` field
         is updated only when new transactions have been imported.
       operationId: triggerPlaidAccountFetch
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - plaid_accounts:update
       parameters:
         - name: start_date
           in: query
@@ -9455,10 +9242,6 @@ paths:
         account. <br>If called with no parameters, this endpoint will return the
         most recent transactions, up to the specified `limit`.
       operationId: getAllTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:read
       parameters:
         - name: start_date
           in: query
@@ -9952,10 +9735,6 @@ paths:
         transactions that were duplicates of existing transactions and were not
         inserted.
       operationId: createNewTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:create
       requestBody:
         required: true
         content:
@@ -10396,10 +10175,6 @@ paths:
         
         The request can include between 1 and 500 transactions to update in a single call.
       operationId: updateTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       requestBody:
         required: true
         content:
@@ -10768,10 +10543,6 @@ paths:
         
         <span class="red-text"><strong>Use with caution. This action is not reversible!</strong></span>
       operationId: deleteTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:delete
       requestBody:
         required: true
         content:
@@ -10888,10 +10659,6 @@ paths:
         include the `children` property which will contain a list
         of the split transactions.
       operationId: getTransactionById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:read
       parameters:
         - name: id
           in: path
@@ -11135,10 +10902,6 @@ paths:
         an `category_id` attribute is valid.
         
       operationId: updateTransaction
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       parameters:
         - name: id
           in: path
@@ -11273,10 +11036,6 @@ paths:
 
         <span class="red-text"><strong>Use with caution. This action is not reversible!</strong></span>
       operationId: deleteTransactionById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:delete
       parameters:
         - in: path
           name: id
@@ -11350,10 +11109,6 @@ paths:
         be included in the `children` property of the transaction returned in
         the response
       operationId: groupTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       requestBody:
         required: true
         content:
@@ -11646,10 +11401,6 @@ paths:
         The transactions within the group are not removed and will subsequently
         be treated as "normal" ungrouped transactions.
       operationId: ungroupTransactions
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       parameters:
         - in: path
           name: id
@@ -11703,10 +11454,6 @@ paths:
         split, use the `GET /transactions/{id}` endpoint and pass the value of
         the `split_parent_id` of one of the children.
       operationId: splitTransaction
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       parameters:
         - name: id
           in: path
@@ -11908,10 +11655,6 @@ paths:
         Use the value of the `split_parent_id`property of a split transaction to
         specify the parent ID.
       operationId: unsplitTransaction
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transactions:update
       parameters:
         - in: path
           name: id
@@ -11953,10 +11696,6 @@ paths:
         - transactions (files)
       summary: Attach a file to a transaction
       operationId: attachFileToTransaction
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transaction_attachments:create
       description: |-
         Attaches a file to a transaction. The file must be less than 10MB in size.<br><br> The file will be attached to the transaction and can be downloaded from the link returned by a `GET /transactions/attachments/{file_id}` request.
       parameters:
@@ -12044,10 +11783,6 @@ paths:
       description: |-
         Returns a signed url that can be used to download the file attachment.
       operationId: getTransactionAttachmentUrl
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transaction_attachments:read
       tags:
         - transactions (files)
       parameters:
@@ -12101,10 +11836,6 @@ paths:
     delete:
       summary: Delete a file attachment
       operationId: deleteTransactionAttachment
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - transaction_attachments:delete
       description: >-
         Deletes a file attachment from a transaction.
       tags:
@@ -12150,10 +11881,6 @@ paths:
       description: Retrieve a list of all tags associated with the user's
         account.
       operationId: getAllTags
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - tags:read
       responses:
         "200":
           description: A list of tags
@@ -12224,10 +11951,6 @@ paths:
       summary: Create a new tag
       description: Creates a new tag with the given name
       operationId: createTag
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - tags:create
       requestBody:
         required: true
         content:
@@ -12295,10 +12018,6 @@ paths:
       summary: Get a single tag
       description: Retrieve the details of a specific tag with the specified ID.
       operationId: getTagById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - tags:read
       parameters:
         - name: id
           in: path
@@ -12378,10 +12097,6 @@ paths:
         properties that is not listed above. For example, a request body that contains only a
         `name` attribute is valid.
       operationId: updateTag
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - tags:update
       parameters:
         - name: id
           in: path
@@ -12485,10 +12200,6 @@ paths:
         returned and the tag is not deleted. This behavior can be overridden by
         setting the `force` parameter to `true`.
       operationId: deleteTag
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - tags:delete
       parameters:
         - in: path
           name: id
@@ -12552,10 +12263,6 @@ paths:
       summary: Get all recurring items
       description: Retrieve recurring items for a specified time frame.
       operationId: getAllRecurring
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - recurring_items:read
       parameters:
         - name: start_date
           in: query
@@ -12699,10 +12406,6 @@ paths:
       description: Retrieve the details of a specific recurring item with the
         specified ID.
       operationId: getRecurringById
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - recurring_items:read
       parameters:
         - name: id
           in: path
@@ -12819,10 +12522,6 @@ paths:
         budget preferences such as currency and locale, see
         [/me/account/settings](#tag/me/GET/me/account/settings).
       operationId: getBudgetSettings
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - budgets:read
       responses:
         "200":
           description: Budget period settings for the current budget
@@ -12851,10 +12550,6 @@ paths:
         Use the [/budgets/settings](#tag/budgets/GET/budgets/settings) endpoint to view the budget period settings for the account.<br>
         To view details for existing budgets, use the [summary](#tag/summary) endpoint.
       operationId: upsertBudget
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - budgets:update
       requestBody:
         required: true
         content:
@@ -12927,10 +12622,6 @@ paths:
         the account's budget settings.<br> To view details for existing budgets,
         use the [summary](#tag/summary) endpoint.
       operationId: deleteBudget
-      security:
-        - bearerSecurity: []
-        - oauth2Security:
-            - budgets:delete
       parameters:
         - in: query
           name: category_id