Looking at the request API , he says the area should be a string. However, I was not able to figure out how to specify several areas (e.g. EXPRESS_CHECKOUT and REFUND). Comma-separated, half-colony, and even using their NVP list syntax do not work. It would be helpful to evaluate the CURL sample.
Example with commas ...
curl -s --insecure -H "X-PAYPAL-SECURITY-USERID: API_USERNAME" -H "X-PAYPAL-SECURITY-PASSWORD: API_PASSWORD" -H "X-PAYPAL-SECURITY-SIGNATURE: API_SIGNATURE" -H "X-PAYPAL-REQUEST-DATA-FORMAT: NV" -H "X-PAYPAL-RESPONSE-DATA-FORMAT: NV" -H "X-PAYPAL-APPLICATION-ID: APP-80W284485P519543T" https://svcs.sandbox.paypal.com/Permissions/RequestPermissions -d "requestEnvelope.errorLanguage=en_US&scope=EXPRESS_CHECKOUT,REFUND&callback=http://my/callback"
When I make this request, I go back to "Invalid request parameter area with EXPRESS_CHECKOUT, REFUND"
source share