CAA Insurance · OAuth Scopes

CAA Insurance OAuth Scopes

OAuth 2.0 searched

CAA Insurance publishes 4 OAuth 2.0 scopes via the authorizationCode and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the CAA Insurance API on a user’s behalf.

Tokens are issued from https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

InsuranceCanadaProperty and CasualtyAuto InsuranceHome InsuranceCarrierBrokersPersonal LinesTelematicsPartner GatedNo Public API

Scopes: 4 Flows: authorizationCode, deviceCode Method: searched

OAuth endpoints

Authorization URL
https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/authorize

Token URL
https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token

Flows
authorizationCodedeviceCode

Scopes (4)

Scope	Description	Flows
openid	Sign the user in and issue an ID token.	authorizationCode, deviceCode
profile	Basic profile claims (name, preferred_username).	authorizationCode, deviceCode
email	The user's email claim.	authorizationCode, deviceCode
offline_access	Issue a refresh token so the session can be renewed without re-prompting.	authorizationCode, deviceCode

📄 Provider scope reference: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/v2.0/.well-known/openid-configuration

Source

OAuth Scopes

generated: '2026-07-25'
method: searched
source: well-known/caa-insurance-openid-configuration.json
docs: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/v2.0/.well-known/openid-configuration
note: >-
  CAA Insurance exposes no API and therefore no API authorization scopes. The
  only scope surface observable anywhere in the estate is the standard OpenID
  Connect scope set advertised by the Microsoft Entra External ID (CIAM) tenant
  that authenticates the CAA Broker Portal and CAA Club Group sign-in. These are
  identity scopes for signing a human in, not delegated permissions over
  insurance data — no quote, policy, billing, or claims scope exists publicly.
surface: identity-provider
schemes:
- name: EntraExternalIdCIAM
  type: openIdConnect
  source: well-known/caa-insurance-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/authorize
    tokenUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/devicecode
    tokenUrl: https://ccgexternalid.ciamlogin.com/018aba37-21fa-4b10-9382-01cdc448ba66/oauth2/v2.0/token
scopes:
- scope: openid
  description: Sign the user in and issue an ID token.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: profile
  description: Basic profile claims (name, preferred_username).
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: email
  description: The user's email claim.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
- scope: offline_access
  description: Issue a refresh token so the session can be renewed without re-prompting.
  flows: [authorizationCode, deviceCode]
  sources: [well-known/caa-insurance-openid-configuration.json]
business_scopes:
  published: false
  note: No quote, bind, policy, billing, or claims scope is published by CAA Insurance.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/caa-insurance-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.