AmunCore · OAuth Scopes

AmunCore OAuth Scopes

OAuth 2.0 probed

AmunCore publishes 1 OAuth 2.0 scope via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the AmunCore API on a user’s behalf.

Tokens are issued from https://amuncore.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

DatabaseAPI ManagementBackendNo-CodeSQLPostgreSQLMySQLOracleMCPAgentsDataSQL ServerWebhookOpenAPILow-CodeEgypt

Scopes: 1 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://amuncore.com/oauth/authorize

Token URL
https://amuncore.com/oauth/token

Flows
authorizationCode

Scopes (1)

Scope	Description	Flows
mcp	Access to the AmunCore MCP endpoint at https://amuncore.com/mcp. AmunCore publishes no finer-grained scope decomposition; authorization is coarse at the protocol boundary and the actual data a caller can reach is bounded by the API key / company tenancy behind the token rather than by scope.	authorizationCode

📄 Provider scope reference: https://amuncore.com/llms.txt

Source

OAuth Scopes

generated: '2026-08-10'
method: probed
source: https://amuncore.com/.well-known/oauth-authorization-server
docs: https://amuncore.com/llms.txt
description: >-
  AmunCore's OAuth surface exists solely to authorize the MCP endpoint. The
  RFC 8414 authorization server metadata declares exactly one scope — "mcp" —
  and the RFC 9728 protected resource metadata confirms it applies to
  https://amuncore.com/mcp. The REST API itself does not use OAuth at all; it is
  authenticated with an X-Api-Key header, so there is no scope surface on the
  REST side and none is invented here.
schemes:
- name: OAuth 2.0 (MCP authorization)
  source: https://amuncore.com/.well-known/oauth-authorization-server
  issuer: https://amuncore.com
  flows:
  - flow: authorizationCode
    authorizationUrl: https://amuncore.com/oauth/authorize
    tokenUrl: https://amuncore.com/oauth/token
    pkce: S256
    note: PKCE with S256 is the only code challenge method advertised.
  grant_types: [authorization_code, refresh_token]
  registration_endpoint: https://amuncore.com/oauth/register
  registration_spec: RFC 7591 dynamic client registration
  token_endpoint_auth_methods: [none, client_secret_post]
scopes:
- scope: mcp
  description: >-
    Access to the AmunCore MCP endpoint at https://amuncore.com/mcp. AmunCore
    publishes no finer-grained scope decomposition; authorization is coarse at
    the protocol boundary and the actual data a caller can reach is bounded by
    the API key / company tenancy behind the token rather than by scope.
  flows: [authorizationCode]
  resource: https://amuncore.com/mcp
  sources: ['https://amuncore.com/.well-known/oauth-authorization-server']
coverage:
  scopes_declared: 1
  rest_api_uses_oauth: false
gaps:
- Single coarse scope. There is no read-only vs read-write split at the OAuth
  layer, so an agent token cannot be narrowed below "everything this company's
  key can reach". Per-endpoint and read-only keys exist on the REST side
  (scoped API keys) but are not projected into OAuth scopes.
- No openid-configuration, so this is plain OAuth 2.0 authorization rather than
  OpenID Connect; there is no identity token for the acting agent.
evidence:
- url: https://amuncore.com/.well-known/oauth-authorization-server
  status: 200
- url: https://amuncore.com/.well-known/oauth-protected-resource
  status: 200
- url: https://amuncore.com/mcp
  status: 401
  method: POST
  note: >-
    Returns WWW-Authenticate: Bearer
    resource_metadata="https://amuncore.com/.well-known/oauth-protected-resource"

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/amuncore-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.