Cyera · OAuth Scopes

Cyera OAuth Scopes

OAuth 2.0 searched

Cyera publishes 3 OAuth 2.0 scopes via the clientCredentials and authorizationCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Cyera API on a user’s behalf.

Tokens are issued from https://auth.cyera.io/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyCybersecurityData SecurityDSPMData Security Posture ManagementData ClassificationCloud SecurityComplianceMCPAI Security
Scopes: 3 Flows: clientCredentials, authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://auth.cyera.io/oauth/authorize
Token URL
https://auth.cyera.io/oauth/token
Flows
clientCredentialsauthorizationCode

Scopes (3)

ScopeDescriptionFlows
openid OpenID Connect authentication; issue an ID token. clientCredentials, authorizationCode
profile Access to the authenticated principal's basic profile claims. clientCredentials, authorizationCode
email Access to the authenticated principal's email claim. clientCredentials, authorizationCode

Source

OAuth Scopes

cyera-scopes.yml Raw ↑
generated: '2026-07-18'
method: searched
source: https://auth.cyera.io/.well-known/openid-configuration
docs: https://support.cyera.io/hc/en-us
schemes:
- name: OAuth2
  source: https://auth.cyera.io/.well-known/openid-configuration
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth.cyera.io/oauth/token
  - flow: authorizationCode
    authorizationUrl: https://auth.cyera.io/oauth/authorize
    tokenUrl: https://auth.cyera.io/oauth/token
scopes:
- scope: openid
  description: OpenID Connect authentication; issue an ID token.
  flows: [clientCredentials, authorizationCode]
  sources: [https://auth.cyera.io/.well-known/openid-configuration]
- scope: profile
  description: Access to the authenticated principal's basic profile claims.
  flows: [clientCredentials, authorizationCode]
  sources: [https://auth.cyera.io/.well-known/openid-configuration]
- scope: email
  description: Access to the authenticated principal's email claim.
  flows: [clientCredentials, authorizationCode]
  sources: [https://auth.cyera.io/.well-known/openid-configuration]
notes: >-
  Only the OIDC-standard scopes (openid, profile, email) are advertised by the
  authorization server's discovery document. Fine-grained data-access
  authorization in Cyera is enforced by tenant/role rather than by additional
  OAuth scopes advertised at the discovery endpoint; the API's resource-level
  permission reference is behind the authenticated developer portal
  (api.cyera.io/docs).