Carefluence · OAuth Scopes

Carefluence OAuth Scopes

OAuth 2.0 probed

Carefluence publishes 51 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Carefluence API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareInteroperabilityFHIRHL7SMART on FHIRElectronic Health RecordsClinical DataHealth ITONC CertifiedUSCDIOAuth 2.0TelehealthHealth Information Exchange
Scopes: 51 Flows: Method: probed

Scopes (51)

ScopeDescriptionFlows
address Access the address claim.
email Access the email and email_verified claims.
openid Request an OpenID Connect ID token identifying the authorizing user.
phone Access the phone and phone_verified claims.
profile Access the standard OpenID profile claims (name, family_name, given_name, gender, birthdate, locale and related).
fhirUser SMART fhirUser claim identifying the FHIR resource for the logged-in user.
launch SMART EHR launch context.
launch/patient SMART standalone launch requesting patient context selection.
offline_access Issue a refresh token so the app can act without the user present.
patient/AllergyIntolerance.read Read every AllergyIntolerance resource in the in-context patient's compartment.
patient/CarePlan.read Read every CarePlan resource in the in-context patient's compartment.
patient/CareTeam.read Read every CareTeam resource in the in-context patient's compartment.
patient/Condition.read Read every Condition resource in the in-context patient's compartment.
patient/Device.read Read every Device resource in the in-context patient's compartment.
patient/DiagnosticReport.read Read every DiagnosticReport resource in the in-context patient's compartment.
patient/DocumentReference.read Read every DocumentReference resource in the in-context patient's compartment.
patient/Encounter.read Read every Encounter resource in the in-context patient's compartment.
patient/Goal.read Read every Goal resource in the in-context patient's compartment.
patient/Immunization.read Read every Immunization resource in the in-context patient's compartment.
patient/Location.read Read every Location resource in the in-context patient's compartment.
patient/Medication.read Read every Medication resource in the in-context patient's compartment.
patient/MedicationRequest.read Read every MedicationRequest resource in the in-context patient's compartment.
patient/Observation.read Read every Observation resource in the in-context patient's compartment.
patient/Organization.read Read every Organization resource in the in-context patient's compartment.
patient/Patient.read Read every Patient resource in the in-context patient's compartment.
patient/Practitioner.read Read every Practitioner resource in the in-context patient's compartment.
patient/PractitionerRole.read Read every PractitionerRole resource in the in-context patient's compartment.
patient/Procedure.read Read every Procedure resource in the in-context patient's compartment.
patient/Provenance.read Read every Provenance resource in the in-context patient's compartment.
user/AllergyIntolerance.read Read AllergyIntolerance resources the authorizing user is permitted to see.
user/CarePlan.read Read CarePlan resources the authorizing user is permitted to see.
user/CareTeam.read Read CareTeam resources the authorizing user is permitted to see.
user/Condition.read Read Condition resources the authorizing user is permitted to see.
user/Device.read Read Device resources the authorizing user is permitted to see.
user/DiagnosticReport.read Read DiagnosticReport resources the authorizing user is permitted to see.
user/DocumentReference.read Read DocumentReference resources the authorizing user is permitted to see.
user/Encounter.read Read Encounter resources the authorizing user is permitted to see.
user/Goal.read Read Goal resources the authorizing user is permitted to see.
user/Immunization.read Read Immunization resources the authorizing user is permitted to see.
user/Medication.read Read Medication resources the authorizing user is permitted to see.
user/MedicationRequest.read Read MedicationRequest resources the authorizing user is permitted to see.
user/Observation.read Read Observation resources the authorizing user is permitted to see.
user/Organization.read Read Organization resources the authorizing user is permitted to see.
user/Patient.read Read Patient resources the authorizing user is permitted to see.
user/Practitioner.read Read Practitioner resources the authorizing user is permitted to see.
user/PractitionerRole.read Read PractitionerRole resources the authorizing user is permitted to see.
user/Procedure.read Read Procedure resources the authorizing user is permitted to see.
user/Provenance.read Read Provenance resources the authorizing user is permitted to see.
system/*.read Backend-services read access across all resource types the client is authorised for.
user/Location.read Read Location resources the authorizing user is permitted to see.
patient/*.read Read every resource in the in-context patient's compartment.

📄 Provider scope reference: https://api.carefluence.com/

Source

OAuth Scopes

Raw ↑ 
generated: '2026-09-02'
method: probed
source: https://core.carefluence.com/cf.admin.core/.well-known/openid-configuration (HTTP 200, fetched 2026-09-02) — scopes_supported read verbatim from the live OpenID Connect discovery document
docs: https://api.carefluence.com/  # "Security & Authorization Flow" section: "The Carefluence OpenAPI R4 authorization server uses the scopes defined for Smart on FHIR."
name: Carefluence Open API R4 OAuth scopes
description: >-
  The SMART on FHIR scope set advertised by the Carefluence authorization
  server at https://core.carefluence.com/cf.admin.core. Every clinical scope
  is read-only: the server advertises no .write or .* compound write scope,
  even though the FHIR CapabilityStatement declares create/update/patch
  interactions on 23 of its 24 resource types.
issuer: https://core.carefluence.com/cf.admin.core
authorization_endpoint: https://core.carefluence.com/cf.admin.core/connect/authorize
token_endpoint: https://core.carefluence.com/cf.admin.core/connect/token
scope_syntax: SMART App Launch scopes v1 (<compartment>/<Resource>.<access>)
scope_count: 51
scopes:
- scope: 'address'
  category: openid-connect
  description: "Access the address claim."
- scope: 'email'
  category: openid-connect
  description: "Access the email and email_verified claims."
- scope: 'openid'
  category: openid-connect
  description: "Request an OpenID Connect ID token identifying the authorizing user."
- scope: 'phone'
  category: openid-connect
  description: "Access the phone and phone_verified claims."
- scope: 'profile'
  category: openid-connect
  description: "Access the standard OpenID profile claims (name, family_name, given_name, gender, birthdate, locale and related)."
- scope: 'fhirUser'
  category: openid-connect
  description: "SMART fhirUser claim identifying the FHIR resource for the logged-in user."
- scope: 'launch'
  category: smart-launch-context
  description: "SMART EHR launch context."
- scope: 'launch/patient'
  category: smart-launch-context
  description: "SMART standalone launch requesting patient context selection."
- scope: 'offline_access'
  category: refresh
  description: "Issue a refresh token so the app can act without the user present."
- scope: 'patient/AllergyIntolerance.read'
  category: smart-patient
  description: "Read every AllergyIntolerance resource in the in-context patient's compartment."
- scope: 'patient/CarePlan.read'
  category: smart-patient
  description: "Read every CarePlan resource in the in-context patient's compartment."
- scope: 'patient/CareTeam.read'
  category: smart-patient
  description: "Read every CareTeam resource in the in-context patient's compartment."
- scope: 'patient/Condition.read'
  category: smart-patient
  description: "Read every Condition resource in the in-context patient's compartment."
- scope: 'patient/Device.read'
  category: smart-patient
  description: "Read every Device resource in the in-context patient's compartment."
- scope: 'patient/DiagnosticReport.read'
  category: smart-patient
  description: "Read every DiagnosticReport resource in the in-context patient's compartment."
- scope: 'patient/DocumentReference.read'
  category: smart-patient
  description: "Read every DocumentReference resource in the in-context patient's compartment."
- scope: 'patient/Encounter.read'
  category: smart-patient
  description: "Read every Encounter resource in the in-context patient's compartment."
- scope: 'patient/Goal.read'
  category: smart-patient
  description: "Read every Goal resource in the in-context patient's compartment."
- scope: 'patient/Immunization.read'
  category: smart-patient
  description: "Read every Immunization resource in the in-context patient's compartment."
- scope: 'patient/Location.read'
  category: smart-patient
  description: "Read every Location resource in the in-context patient's compartment."
- scope: 'patient/Medication.read'
  category: smart-patient
  description: "Read every Medication resource in the in-context patient's compartment."
- scope: 'patient/MedicationRequest.read'
  category: smart-patient
  description: "Read every MedicationRequest resource in the in-context patient's compartment."
- scope: 'patient/Observation.read'
  category: smart-patient
  description: "Read every Observation resource in the in-context patient's compartment."
- scope: 'patient/Organization.read'
  category: smart-patient
  description: "Read every Organization resource in the in-context patient's compartment."
- scope: 'patient/Patient.read'
  category: smart-patient
  description: "Read every Patient resource in the in-context patient's compartment."
- scope: 'patient/Practitioner.read'
  category: smart-patient
  description: "Read every Practitioner resource in the in-context patient's compartment."
- scope: 'patient/PractitionerRole.read'
  category: smart-patient
  description: "Read every PractitionerRole resource in the in-context patient's compartment."
- scope: 'patient/Procedure.read'
  category: smart-patient
  description: "Read every Procedure resource in the in-context patient's compartment."
- scope: 'patient/Provenance.read'
  category: smart-patient
  description: "Read every Provenance resource in the in-context patient's compartment."
- scope: 'user/AllergyIntolerance.read'
  category: smart-user
  description: "Read AllergyIntolerance resources the authorizing user is permitted to see."
- scope: 'user/CarePlan.read'
  category: smart-user
  description: "Read CarePlan resources the authorizing user is permitted to see."
- scope: 'user/CareTeam.read'
  category: smart-user
  description: "Read CareTeam resources the authorizing user is permitted to see."
- scope: 'user/Condition.read'
  category: smart-user
  description: "Read Condition resources the authorizing user is permitted to see."
- scope: 'user/Device.read'
  category: smart-user
  description: "Read Device resources the authorizing user is permitted to see."
- scope: 'user/DiagnosticReport.read'
  category: smart-user
  description: "Read DiagnosticReport resources the authorizing user is permitted to see."
- scope: 'user/DocumentReference.read'
  category: smart-user
  description: "Read DocumentReference resources the authorizing user is permitted to see."
- scope: 'user/Encounter.read'
  category: smart-user
  description: "Read Encounter resources the authorizing user is permitted to see."
- scope: 'user/Goal.read'
  category: smart-user
  description: "Read Goal resources the authorizing user is permitted to see."
- scope: 'user/Immunization.read'
  category: smart-user
  description: "Read Immunization resources the authorizing user is permitted to see."
- scope: 'user/Medication.read'
  category: smart-user
  description: "Read Medication resources the authorizing user is permitted to see."
- scope: 'user/MedicationRequest.read'
  category: smart-user
  description: "Read MedicationRequest resources the authorizing user is permitted to see."
- scope: 'user/Observation.read'
  category: smart-user
  description: "Read Observation resources the authorizing user is permitted to see."
- scope: 'user/Organization.read'
  category: smart-user
  description: "Read Organization resources the authorizing user is permitted to see."
- scope: 'user/Patient.read'
  category: smart-user
  description: "Read Patient resources the authorizing user is permitted to see."
- scope: 'user/Practitioner.read'
  category: smart-user
  description: "Read Practitioner resources the authorizing user is permitted to see."
- scope: 'user/PractitionerRole.read'
  category: smart-user
  description: "Read PractitionerRole resources the authorizing user is permitted to see."
- scope: 'user/Procedure.read'
  category: smart-user
  description: "Read Procedure resources the authorizing user is permitted to see."
- scope: 'user/Provenance.read'
  category: smart-user
  description: "Read Provenance resources the authorizing user is permitted to see."
- scope: 'system/*.read'
  category: smart-system
  description: "Backend-services read access across all resource types the client is authorised for."
- scope: 'user/Location.read'
  category: smart-user
  description: "Read Location resources the authorizing user is permitted to see."
- scope: 'patient/*.read'
  category: smart-patient
  description: "Read every resource in the in-context patient's compartment."
notes:
- >-
  scopes_supported in the live document lists 52 entries but contains
  offline_access twice; 51 are distinct.
- >-
  patient/*.read and system/*.read wildcards are advertised alongside the
  per-resource scopes.
- >-
  Location is advertised under user/ and patient/ but the CapabilityStatement
  exposes Location as an open directory-style search; treat scope grants as
  the authoritative access control.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this
  • find_scopesBrowse and filter every scope set in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This scope set 
curl "https://apis.io/api/v1/scopes/carefluence-scopes"
All oauth scopes 
curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.