Darrow · OAuth Scopes

Darrow OAuth Scopes

OAuth 2.0 probed

Darrow uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyLegalLegal IntelligenceLitigationArtificial IntelligenceComplianceRisk ManagementInsuranceData Analytics

Scopes: 0 Flows: Method: probed

Scopes (0)

Darrow implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

These are the scopes advertised by Darrow's Auth0 identity tenant, read from `scopes_supported` in its OpenID Connect discovery document. They are the standard OIDC/Auth0 profile scopes — Darrow publishes no product API and therefore no API-specific permission scopes. Absence of custom scopes here is a finding, not a gap in the probe: no public resource-server metadata or scope reference exists.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-11'
method: probed
source: https://auth.darrow.ai/.well-known/openid-configuration
docs: null
note: >-
  These are the scopes advertised by Darrow's Auth0 identity tenant, read from
  `scopes_supported` in its OpenID Connect discovery document. They are the standard
  OIDC/Auth0 profile scopes — Darrow publishes no product API and therefore no
  API-specific permission scopes. Absence of custom scopes here is a finding, not a gap
  in the probe: no public resource-server metadata or scope reference exists.
issuer: https://auth.darrow.ai/
scope_count: 14
custom_scope_count: 0
scopes:
- name: openid
  description: Request an ID token (OIDC core).
  standard: oidc
- name: profile
  description: Basic profile claims (name, family_name, given_name, nickname, picture, created_at).
  standard: oidc
- name: offline_access
  description: Issue a refresh token for long-lived access.
  standard: oidc
- name: email
  description: Email address claim.
  standard: oidc
- name: email_verified
  description: Email verification status claim.
  standard: auth0
- name: address
  description: Address claim.
  standard: oidc
- name: phone
  description: Phone number claim.
  standard: oidc
- name: name
  description: Full name claim.
  standard: auth0
- name: given_name
  description: Given name claim.
  standard: auth0
- name: family_name
  description: Family name claim.
  standard: auth0
- name: nickname
  description: Nickname claim.
  standard: auth0
- name: picture
  description: Profile picture URL claim.
  standard: auth0
- name: created_at
  description: Account creation timestamp claim.
  standard: auth0
- name: identities
  description: Linked identity provider records.
  standard: auth0
x-evidence:
  fetched: '2026-08-11'
  url: https://auth.darrow.ai/.well-known/openid-configuration
  http_status: 200