How do I get scope(s) when requesting token from 3rd party to do transaction list on their account?

How do I get scope(s) when requesting token from 3rd party to do
transaction list on their account?

My app allows third party users to login via PayPal and to authorise it to
collect UserInfo such as name and address. I now want to get permission to
do a transaction list on their account using the token they provide.
I get 401 Not Authorized using the current tokens and OAuth won't accept
'https://api.paypal.com/v1/payments/.*' as a scope.