ConcertAI · OAuth Scopes

ConcertAI OAuth Scopes

OAuth 2.0 probed

ConcertAI publishes 14 OAuth 2.0 scopes via the authorizationCode, clientCredentials, and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the ConcertAI API on a user’s behalf.

Tokens are issued from https://auth.precision.concertai.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareOncologyArtificial IntelligenceReal-World DataClinical TrialsLife SciencesMedical ImagingHealth Data

Scopes: 14 Flows: authorizationCode, clientCredentials, deviceCode Method: probed

OAuth endpoints

Authorization URL
https://auth.precision.concertai.com/authorize

Token URL
https://auth.precision.concertai.com/oauth/token

Flows
authorizationCodeclientCredentialsdeviceCode

Scopes (14)

Scope	Description	Flows
openid	Request an OpenID Connect ID token for the authenticating user.	authorizationCode
profile	Access the user's basic profile claims.	authorizationCode
offline_access	Issue a refresh token for long-lived access.	authorizationCode
name	Access the user's full name claim.	authorizationCode
given_name	Access the user's given name claim.	authorizationCode
family_name	Access the user's family name claim.	authorizationCode
nickname	Access the user's nickname claim.	authorizationCode
email	Access the user's email address claim.	authorizationCode
email_verified	Access the user's email verification status claim.	authorizationCode
picture	Access the user's profile picture claim.	authorizationCode
created_at	Access the account creation timestamp claim.	authorizationCode
identities	Access the linked-identity claim for federated accounts.	authorizationCode
phone	Access the user's phone number claim.	authorizationCode
address	Access the user's address claim.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-09'
method: probed
source: https://auth.precision.concertai.com/.well-known/openid-configuration
docs: null
note: >-
  ConcertAI publishes no scopes or permissions reference. The scopes below are the
  scopes_supported advertised by the OpenID Connect discovery document on the Auth0
  tenant fronting the Precision platform. They are the standard OIDC claim scopes plus
  offline_access — no product/resource scopes (data, trial, imaging, patient) are
  advertised anonymously, which means any API-level authorization model for the
  Precision or Eureka platforms is not publicly discoverable.
schemes:
- name: precision-oidc
  source: well-known/concertai-precision-openid-configuration.json
  issuer: https://auth.precision.concertai.com/
  flows:
  - flow: authorizationCode
    authorizationUrl: https://auth.precision.concertai.com/authorize
    tokenUrl: https://auth.precision.concertai.com/oauth/token
  - flow: clientCredentials
    tokenUrl: https://auth.precision.concertai.com/oauth/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://auth.precision.concertai.com/oauth/device/code
    tokenUrl: https://auth.precision.concertai.com/oauth/token
scopes:
- scope: openid
  description: Request an OpenID Connect ID token for the authenticating user.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: profile
  description: Access the user's basic profile claims.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: offline_access
  description: Issue a refresh token for long-lived access.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: name
  description: Access the user's full name claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: given_name
  description: Access the user's given name claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: family_name
  description: Access the user's family name claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: nickname
  description: Access the user's nickname claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: email
  description: Access the user's email address claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: email_verified
  description: Access the user's email verification status claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: picture
  description: Access the user's profile picture claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: created_at
  description: Access the account creation timestamp claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: identities
  description: Access the linked-identity claim for federated accounts.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: phone
  description: Access the user's phone number claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
- scope: address
  description: Access the user's address claim.
  flows: [authorizationCode]
  sources: [well-known/concertai-precision-openid-configuration.json]
x-evidence:
- url: https://auth.precision.concertai.com/.well-known/openid-configuration
  http_status: 200