Didit · OAuth Scopes

Didit OAuth Scopes

OAuth 2.0 searched

Didit publishes 5 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Didit API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

IdentityIdentity VerificationKYCKYBAMLFraud PreventionComplianceBiometricsTransaction MonitoringCrypto

Scopes: 5 Flows: authorizationCode Method: searched

Scopes (5)

Scope	Description	Flows
openid	OpenID Connect authentication.
profile	Access to the signed-in user's profile.
email	Access to the signed-in user's email address.
didit:management	Management API access — workflows, lists, webhooks, users, businesses, billing.
didit:verification	Verification API access — sessions and standalone verification operations.

📄 Provider scope reference: https://docs.didit.me/integration/programmatic-registration

Source

OAuth Scopes

generated: '2026-07-18'
method: searched
source: https://business.didit.me/.well-known/oauth-authorization-server
docs: https://docs.didit.me/integration/programmatic-registration
note: >-
  The verification REST API authenticates with an x-api-key header (no OAuth
  scopes). OAuth 2.1 applies to the Business Console / Management surface and
  the hosted MCP server, whose authorization-server metadata advertises these
  scopes. Flow: authorization_code + refresh_token, PKCE S256, public clients.
schemes:
  - name: OAuth2
    issuer: https://business.didit.me
    authorization_url: https://business.didit.me/authorize
    token_url: https://business.didit.me/api/auth/oauth-token
    registration_url: https://business.didit.me/api/auth/oauth-register
    flows:
      - flow: authorizationCode
        pkce: S256
        grant_types: [authorization_code, refresh_token]
scopes:
  - scope: openid
    description: OpenID Connect authentication.
  - scope: profile
    description: Access to the signed-in user's profile.
  - scope: email
    description: Access to the signed-in user's email address.
  - scope: "didit:management"
    description: Management API access — workflows, lists, webhooks, users, businesses, billing.
  - scope: "didit:verification"
    description: Verification API access — sessions and standalone verification operations.