Clarification on OAuth limits for unlisted/private production applications

MCP
, , ,
1

Hi Square Team,

I am developing a web application that integrates with Square POS to sync product and location data. My application for the App Marketplace was recently declined due to capacity, so I am planning to move forward with a private/unlisted integration.

I have two questions regarding the OAuth flow:

  1. Scope Access: Is it possible to utilize all required production scopes (e.g., EMPLOYEES_READ) for external merchants without being an approved Marketplace partner?

  2. Connection Limits: Is there a hard limit on the number of unique Square merchant accounts that can authorize my application via OAuth while it remains unlisted/outside the Marketplace?

I want to ensure I remain compliant with Square’s terms while supporting my existing users. Thank you for your help!