Also · OAuth Scopes

Also OAuth Scopes

OAuth 2.0 searched

Also publishes 5 OAuth 2.0 scopes via the authorizationCode, refreshToken, and urn:ietf:params:oauth:grant-type:jwt-bearer flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Also API on a user’s behalf.

Tokens are issued from https://shopify.com/authentication/74758783200/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyMicromobilityElectric VehiclesTransportationE-CommerceConsumer HardwareAgentic CommerceLogisticsDelivery

Scopes: 5 Flows: authorizationCode, refreshToken, urn:ietf:params:oauth:grant-type:jwt-bearer Method: searched

OAuth endpoints

Authorization URL
https://shopify.com/authentication/74758783200/oauth/authorize https://idp.ridealso.com/oauth2/authorize

Token URL
https://shopify.com/authentication/74758783200/oauth/token https://idp.ridealso.com/oauth2/token

Flows
authorizationCoderefreshTokenurn:ietf:params:oauth:grant-type:jwt-bearer

Scopes (5)

Scope	Description	Flows
openid	Issue an OpenID Connect ID token for the signed-in customer.	authorizationCode
email	Release the customer's email address and email_verified claim.	authorizationCode
profile	Release basic profile claims. Requested by the ALSO idp.ridealso.com social sign-in links.	authorizationCode
customer-account-api:full	Full access to the Shopify Customer Account API on behalf of the signed-in customer - orders, addresses, profile and subscriptions.	authorizationCode
customer-account-mcp-api:full	Full access to the Customer Account MCP API - the agent-facing projection of the customer account surface. Notable as an explicitly agent-scoped OAuth scope.	authorizationCode

📄 Provider scope reference: https://ridealso.com/.well-known/oauth-authorization-server

Source

OAuth Scopes

generated: '2026-08-02'
method: searched
source: https://ridealso.com/.well-known/openid-configuration
docs: https://ridealso.com/.well-known/oauth-authorization-server
note: Scopes are published live in ALSO's own OIDC / RFC 8414 discovery documents at
  ridealso.com. No OpenAPI on this provider declares oauth2 security schemes, so these
  were harvested from the discovery surface rather than derived from a spec.
schemes:
- name: shopify-customer-accounts
  source: well-known/also-openid-configuration.json
  issuer: https://shopify.com/authentication/74758783200
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/74758783200/oauth/authorize
    tokenUrl: https://shopify.com/authentication/74758783200/oauth/token
  - flow: refreshToken
    tokenUrl: https://shopify.com/authentication/74758783200/oauth/token
  - flow: 'urn:ietf:params:oauth:grant-type:jwt-bearer'
    tokenUrl: https://shopify.com/authentication/74758783200/oauth/token
- name: also-idp
  source: 'https://ridealso.com/ (login links)'
  flows:
  - flow: authorizationCode
    authorizationUrl: https://idp.ridealso.com/oauth2/authorize
    tokenUrl: https://idp.ridealso.com/oauth2/token
scopes:
- scope: openid
  description: Issue an OpenID Connect ID token for the signed-in customer.
  flows: [authorizationCode]
  sources: [well-known/also-openid-configuration.json, 'https://ridealso.com/']
- scope: email
  description: Release the customer's email address and email_verified claim.
  flows: [authorizationCode]
  sources: [well-known/also-openid-configuration.json, 'https://ridealso.com/']
- scope: profile
  description: Release basic profile claims. Requested by the ALSO idp.ridealso.com
    social sign-in links.
  flows: [authorizationCode]
  sources: ['https://ridealso.com/']
- scope: customer-account-api:full
  description: Full access to the Shopify Customer Account API on behalf of the signed-in
    customer - orders, addresses, profile and subscriptions.
  flows: [authorizationCode]
  sources: [well-known/also-openid-configuration.json]
- scope: customer-account-mcp-api:full
  description: Full access to the Customer Account MCP API - the agent-facing projection
    of the customer account surface. Notable as an explicitly agent-scoped OAuth scope.
  flows: [authorizationCode]
  sources: [well-known/also-openid-configuration.json]
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]