BankUnited · OAuth Scopes

BankUnited OAuth Scopes

OAuth 2.0 searched

BankUnited publishes 36 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the BankUnited API on a user’s behalf.

Tokens are issued from https://developer.bankunited.com/aeh/services/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Financial-ServicesBankingUnited StatesRegional BankCommercial BankingOpen FinanceDeveloper Portal

Scopes: 36 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://developer.bankunited.com/aeh/services/oauth2/authorize

Token URL
https://developer.bankunited.com/aeh/services/oauth2/token

Flows
authorizationCode

Scopes (36)

Scope	Description	Flows
openid	OpenID Connect authentication
profile	Basic profile claims
email	Email address claim
address	Address claim
phone	Phone number claim
id	Salesforce identity URL access
api	Access the platform REST/SOAP APIs
web	Web browser access to the connected app
full	Full access (all other scopes except refresh_token)
refresh_token	Issue a refresh token
offline_access	Offline access (refresh token)
lightning	Lightning Experience access
visualforce	Visualforce page access
content	Salesforce CRM content access
chatter_api	Chatter REST API access
wave_api	CRM Analytics (Wave) API access
eclair_api	CRM Analytics charting API access
pardot_api	Pardot / Account Engagement API access
einstein_gpt_api	Einstein GPT / generative AI API access
sfap_api	Salesforce AI platform API access
mcp_api	Model Context Protocol API access (Salesforce platform)
interaction_api	Interaction Studio API access
scrt_api	Service cloud real-time API access
chatbot_api	Einstein Bots API access
user_registration_api	Self-registration API access
pwdless_login_api	Passwordless login API access
forgot_password	Forgot-password flow access
custom_permissions	Include custom permissions in the token
cdp_api	Data Cloud (CDP) API access
cdp_query_api	Data Cloud query API access
cdp_ingest_api	Data Cloud ingestion API access
cdp_profile_api	Data Cloud profile API access
cdp_segment_api	Data Cloud segmentation API access
cdp_identityresolution_api	Data Cloud identity resolution API access
cdp_calculated_insight_api	Data Cloud calculated insights API access
data_cloud_user_claims	Data Cloud user claims

📄 Provider scope reference: https://developer.bankunited.com/s/

Source

OAuth Scopes

generated: '2026-07-23'
method: searched
source: https://developer.bankunited.com/aeh/.well-known/openid-configuration
docs: https://developer.bankunited.com/s/
notes: >-
  These scopes are the scopes_supported list advertised by the BankUnited API
  Experience Hub OIDC discovery document. Because the portal runs on Salesforce
  Experience Cloud, this list is the standard Salesforce OAuth 2.0 connected-app
  scope catalog (openid/profile/email/api/refresh_token plus Salesforce platform
  scopes such as cdp_*, wave_api, pardot_api, einstein_gpt_api, mcp_api) rather
  than BankUnited-specific banking-product scopes. The product-level API
  authorization scopes for BankUnited's own API contracts are defined per API and
  sit behind portal registration/login. Captured verbatim, honestly flagged as
  platform scopes.
schemes:
- name: OAuth2
  source: well-known/bankunited-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://developer.bankunited.com/aeh/services/oauth2/authorize
    tokenUrl: https://developer.bankunited.com/aeh/services/oauth2/token
scopes:
- {scope: openid, description: OpenID Connect authentication, category: identity}
- {scope: profile, description: Basic profile claims, category: identity}
- {scope: email, description: Email address claim, category: identity}
- {scope: address, description: Address claim, category: identity}
- {scope: phone, description: Phone number claim, category: identity}
- {scope: id, description: Salesforce identity URL access, category: identity}
- {scope: api, description: Access the platform REST/SOAP APIs, category: platform}
- {scope: web, description: Web browser access to the connected app, category: platform}
- {scope: full, description: Full access (all other scopes except refresh_token), category: platform}
- {scope: refresh_token, description: Issue a refresh token, category: token}
- {scope: offline_access, description: Offline access (refresh token), category: token}
- {scope: lightning, description: Lightning Experience access, category: platform}
- {scope: visualforce, description: Visualforce page access, category: platform}
- {scope: content, description: Salesforce CRM content access, category: platform}
- {scope: chatter_api, description: Chatter REST API access, category: platform}
- {scope: wave_api, description: CRM Analytics (Wave) API access, category: platform}
- {scope: eclair_api, description: CRM Analytics charting API access, category: platform}
- {scope: pardot_api, description: Pardot / Account Engagement API access, category: platform}
- {scope: einstein_gpt_api, description: Einstein GPT / generative AI API access, category: ai}
- {scope: sfap_api, description: Salesforce AI platform API access, category: ai}
- {scope: mcp_api, description: Model Context Protocol API access (Salesforce platform), category: ai}
- {scope: interaction_api, description: Interaction Studio API access, category: platform}
- {scope: scrt_api, description: Service cloud real-time API access, category: platform}
- {scope: chatbot_api, description: Einstein Bots API access, category: platform}
- {scope: user_registration_api, description: Self-registration API access, category: platform}
- {scope: pwdless_login_api, description: Passwordless login API access, category: platform}
- {scope: forgot_password, description: Forgot-password flow access, category: platform}
- {scope: custom_permissions, description: Include custom permissions in the token, category: platform}
- {scope: cdp_api, description: Data Cloud (CDP) API access, category: data-cloud}
- {scope: cdp_query_api, description: Data Cloud query API access, category: data-cloud}
- {scope: cdp_ingest_api, description: Data Cloud ingestion API access, category: data-cloud}
- {scope: cdp_profile_api, description: Data Cloud profile API access, category: data-cloud}
- {scope: cdp_segment_api, description: Data Cloud segmentation API access, category: data-cloud}
- {scope: cdp_identityresolution_api, description: Data Cloud identity resolution API access, category: data-cloud}
- {scope: cdp_calculated_insight_api, description: Data Cloud calculated insights API access, category: data-cloud}
- {scope: data_cloud_user_claims, description: Data Cloud user claims, category: data-cloud}

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/bankunited-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.