CentralReach · OAuth Scopes

CentralReach OAuth Scopes

OAuth 2.0 searched

CentralReach publishes 4 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the CentralReach API on a user’s behalf.

Tokens are issued from https://login.centralreach.com/connect/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareABA TherapyAutismIDDEMRPractice ManagementBehavioral HealthSpecial EducationBillingOAuth

Scopes: 4 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://login.centralreach.com/connect/token

Flows
clientCredentials

Scopes (4)

Scope	Description	Flows
openid	OpenID Connect authentication scope; requests an ID token identifying the subject.	clientCredentials
cr	CentralReach platform access scope.	clientCredentials
cr-api	Access to the CentralReach Enhanced API (partners-api enterprise endpoints).	clientCredentials
offline_access	Requests a refresh token for long-lived, offline access.	clientCredentials

📄 Provider scope reference: https://community.centralreach.com/s/article/knowledge-api-permissions

Source

OAuth Scopes

generated: '2026-07-18'
method: searched
source: https://login.centralreach.com/.well-known/openid-configuration
docs: https://community.centralreach.com/s/article/knowledge-api-permissions
schemes:
- name: clientCredentials
  source: https://login.centralreach.com/.well-known/openid-configuration
  flows:
  - flow: clientCredentials
    tokenUrl: https://login.centralreach.com/connect/token
scopes:
- scope: openid
  description: OpenID Connect authentication scope; requests an ID token identifying the subject.
  flows: [clientCredentials]
  sources: [https://login.centralreach.com/.well-known/openid-configuration]
- scope: cr
  description: CentralReach platform access scope.
  flows: [clientCredentials]
  sources: [https://login.centralreach.com/.well-known/openid-configuration]
- scope: cr-api
  description: Access to the CentralReach Enhanced API (partners-api enterprise endpoints).
  flows: [clientCredentials]
  sources: [https://login.centralreach.com/.well-known/openid-configuration]
- scope: offline_access
  description: Requests a refresh token for long-lived, offline access.
  flows: [clientCredentials]
  sources: [https://login.centralreach.com/.well-known/openid-configuration]
notes: >-
  scopes_supported advertised by the CentralReach OpenID Connect discovery
  document. Fine-grained per-endpoint API permissions are additionally governed
  by organization-level API permissions (see the API Permissions knowledge
  article); those permission grants are administered in-app rather than expressed
  as OAuth scopes.