Origin Energy

Origin Energy Kraken Authorization Server

The OpenID Connect authorisation server issuing the bearer tokens used by both the Kraken REST and GraphQL APIs. Its discovery document at https://auth.origin-kraken.energy/.well-known/openid-configuration was retrieved anonymously with HTTP 200 on 2026-07-27 and is harvested verbatim here. Issuer https://auth.origin-kraken.energy/token/, authorization /authorize/, token /token/, userinfo /userinfo/, revocation /revoke-token/, end session /logout/, JWKS /.well-known/jwks.json. Client authentication is client_secret_post or client_secret_basic, with no registration endpoint and no PKCE methods advertised, so clients are provisioned by Origin rather than self-registered. The document publishes 113 scopes, including openid, full-customer-access, view:detailed-usage, request:consumption-data, query:electricity-meter-point-details, submit:meter-readings, update:smart-meter-data-preferences, view:ev-data and view:smartflex-data.

GitHub

Documentation

📖
Authentication
https://developer.origin-kraken.energy/graphql/guides/basics/

Other Resources

🔗
OpenIDConfiguration
https://raw.githubusercontent.com/api-evangelist/origin-energy/refs/heads/main/well-known/origin-energy-kraken-openid-configuration.json
🔗
JWKS
https://auth.origin-kraken.energy/.well-known/jwks.json
🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/origin-energy/refs/heads/main/scopes/origin-energy-scopes.yml
🔗
WellKnown
https://raw.githubusercontent.com/api-evangelist/origin-energy/refs/heads/main/well-known/origin-energy-well-known.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: origin-energy:origin-energy-kraken-auth-api
name: Origin Energy Kraken Authorization Server
description: The OpenID Connect authorisation server issuing the bearer tokens used by both the Kraken
  REST and GraphQL APIs. Its discovery document at https://auth.origin-kraken.energy/.well-known/openid-configuration
  was retrieved anonymously with HTTP 200 on 2026-07-27 and is harvested verbatim here. Issuer https://auth.origin-kraken.energy/token/,
  authorization /authorize/, token /token/, userinfo /userinfo/, revocation /revoke-token/, end session
  /logout/, JWKS /.well-known/jwks.json. Client authentication is client_secret_post or client_secret_basic,
  with no registration endpoint and no PKCE methods advertised, so clients are provisioned by Origin rather
  than self-registered. The document publishes 113 scopes, including openid, full-customer-access, view:detailed-usage,
  request:consumption-data, query:electricity-meter-point-details, submit:meter-readings, update:smart-meter-data-preferences,
  view:ev-data and view:smartflex-data.
humanURL: https://developer.origin-kraken.energy/graphql/guides/basics/
baseURL: https://auth.origin-kraken.energy
tags:
- OpenID Connect
- OAuth
- Authentication
- Kraken
properties:
- type: OpenIDConfiguration
  url: well-known/origin-energy-kraken-openid-configuration.json
- type: Authentication
  url: https://developer.origin-kraken.energy/graphql/guides/basics/
- type: JWKS
  url: https://auth.origin-kraken.energy/.well-known/jwks.json
- type: OAuthScopes
  url: scopes/origin-energy-scopes.yml
- type: WellKnown
  url: well-known/origin-energy-well-known.yml