Cynomi · OAuth Scopes

Cynomi OAuth Scopes

OAuth 2.0 searched

Cynomi publishes 11 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Cynomi API on a user’s behalf.

Tokens are issued from https://auth.eu.cynomi.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyCybersecuritySecurityCompliancevCISORisk ManagementGRCMSPMSSPVulnerability Management

Scopes: 11 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://auth.eu.cynomi.com/authorize

Token URL
https://auth.eu.cynomi.com/oauth/token

Flows
authorizationCode

Scopes (11)

Scope	Description	Flows
openid	OpenID Connect authentication; issue an ID token.	authorizationCode
profile	Access the user's basic profile claims.	authorizationCode
email	Access the user's email and email_verified claims.	authorizationCode
offline_access	Issue a refresh token for long-lived access.	authorizationCode
name	User's full name claim.	authorizationCode
given_name	User's given name claim.	authorizationCode
family_name	User's family name claim.	authorizationCode
nickname	User's nickname claim.	authorizationCode
picture	User's profile picture claim.	authorizationCode
phone	User's phone number claim.	authorizationCode
address	User's address claim.	authorizationCode

📄 Provider scope reference: https://cynomi.com/platform/integrations/public-api/

Source

OAuth Scopes

generated: '2026-07-18'
method: searched
source: https://auth.eu.cynomi.com/.well-known/openid-configuration
docs: https://cynomi.com/platform/integrations/public-api/
notes: >-
  These are the OpenID Connect standard scopes advertised by Cynomi's Auth0
  tenant (scopes_supported in the discovery document). They govern identity /
  profile claims on the login flow. Cynomi's Public API authorizes calls with a
  JWT access token bound to the audience https://api.prod-eu.eu.cynomi.com/;
  per-resource API permission scopes are not published on the public discovery
  surface (the Public API reference is gated behind login), so only the
  OIDC identity scopes are captured here.
schemes:
- name: Auth0OIDC
  source: well-known/cynomi-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://auth.eu.cynomi.com/authorize
    tokenUrl: https://auth.eu.cynomi.com/oauth/token
scopes:
- scope: openid
  description: OpenID Connect authentication; issue an ID token.
  flows: [authorizationCode]
- scope: profile
  description: Access the user's basic profile claims.
  flows: [authorizationCode]
- scope: email
  description: Access the user's email and email_verified claims.
  flows: [authorizationCode]
- scope: offline_access
  description: Issue a refresh token for long-lived access.
  flows: [authorizationCode]
- scope: name
  description: User's full name claim.
  flows: [authorizationCode]
- scope: given_name
  description: User's given name claim.
  flows: [authorizationCode]
- scope: family_name
  description: User's family name claim.
  flows: [authorizationCode]
- scope: nickname
  description: User's nickname claim.
  flows: [authorizationCode]
- scope: picture
  description: User's profile picture claim.
  flows: [authorizationCode]
- scope: phone
  description: User's phone number claim.
  flows: [authorizationCode]
- scope: address
  description: User's address claim.
  flows: [authorizationCode]