Elephas Biosciences OAuth Scopes

OAuth 2.0 probed

Elephas Biosciences publishes 2 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Elephas Biosciences API on a user’s behalf.

Tokens are issued from https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareLife SciencesBiotechnologyPrecision OncologyDiagnosticsImmunotherapyClinical ResearchLaboratoryMedical Devices

Scopes: 2 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/authorize

Token URL
https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token

Flows
authorizationCode

Scopes (2)

Scope	Description	Flows
openid	Standard OpenID Connect scope; the only value advertised in scopes_supported by the B2C discovery document.	authorizationCode
https://elephasus.onmicrosoft.com/prod/api/User.Read	Resource scope the Elephas Portal requests for the production backend API. The application id URI (elephasus.onmicrosoft.com/prod/api) names the Elephas Portal API resource; User.Read is the delegated permission the browser client asks for on the signed-in user's behalf.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-12'
method: probed
source: 'https://portal.elephas.com/assets/config/config.json (Scope value requested
  by the Elephas Portal SPA) + well-known/elephas-biosciences-openid-configuration.json'
docs: null
docs_note: Elephas publishes no scopes or permissions reference. Both scopes below
  were observed, not documented.
schemes:
- name: AzureAdB2C
  type: openIdConnect
  source: well-known/elephas-biosciences-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/authorize
    tokenUrl: https://na.login.elephas.com/bf865bf1-740f-49ec-922c-9b2c233faa13/b2c_1a_smart_hrd_susi/oauth2/v2.0/token
scopes:
- scope: openid
  description: Standard OpenID Connect scope; the only value advertised in
    scopes_supported by the B2C discovery document.
  flows: [authorizationCode]
  sources: [well-known/elephas-biosciences-openid-configuration.json]
- scope: https://elephasus.onmicrosoft.com/prod/api/User.Read
  description: 'Resource scope the Elephas Portal requests for the production
    backend API. The application id URI (elephasus.onmicrosoft.com/prod/api) names
    the Elephas Portal API resource; User.Read is the delegated permission the
    browser client asks for on the signed-in user''s behalf.'
  resource: elephasus.onmicrosoft.com/prod/api
  flows: [authorizationCode]
  sources: [https://portal.elephas.com/assets/config/config.json]
scope_count: 2
coverage_note: 'This is the complete OBSERVABLE scope surface, not necessarily the
  complete one. Azure AD B2C does not advertise resource scopes in discovery, so any
  additional delegated or application permissions the API defines are only visible
  to an authenticated tenant administrator. A single User.Read-style delegated scope
  fronting an entire clinical reporting API suggests authorization is enforced
  server-side by role rather than by OAuth scope.'

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/elephas-biosciences-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.