Enigma Analytics · OAuth Scopes

Enigma Analytics OAuth Scopes

OAuth 2.0 probed

Enigma Analytics uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

Tokens are issued from https://oauth.enigma.com/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyBusiness DataKYBIdentity VerificationComplianceSanctions ScreeningGraphQLFintechData EnrichmentMCPAgent SkillsPayments Risk

Scopes: 0 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://oauth.enigma.com/authorize

Token URL
https://oauth.enigma.com/token

Flows
authorizationCode

Scopes (0)

Enigma Analytics implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference: https://documentation.enigma.com/guides/ai-mcp

Source

OAuth Scopes

generated: '2026-08-14'
method: probed
source: https://mcp.enigma.com/.well-known/oauth-authorization-server
docs: https://documentation.enigma.com/guides/ai-mcp
notes: >-
  Enigma's OAuth surface exists for ONE purpose: authorizing MCP clients against
  https://mcp.enigma.com/mcp. The GraphQL API, the KYB REST API and the Screen API are all API-key
  (x-api-key) authenticated and have no OAuth or scope surface at all — do not read this file as a
  scope model for them. The authorization-server metadata was fetched anonymously (RFC 8414) and is
  saved verbatim at well-known/enigma-analytics-oauth-authorization-server.json; the protected
  resource metadata (RFC 9728) is at well-known/enigma-analytics-oauth-protected-resource.json.
schemes:
- name: EnigmaMCPOAuth
  type: oauth2
  version: OAuth 2.1 (MCP authorization profile)
  issuer: https://oauth.enigma.com
  protected_resource: https://mcp.enigma.com/http
  service_documentation: https://modelcontextprotocol.io/authorization
  flows:
  - flow: authorizationCode
    authorizationUrl: https://oauth.enigma.com/authorize
    tokenUrl: https://oauth.enigma.com/token
    pkce_required_methods: [S256]
    response_types: [code]
    response_modes: [query, fragment]
    grant_types: [authorization_code, refresh_token]
    token_endpoint_auth_methods: [client_secret_basic]
  dynamic_client_registration:
    supported: true
    registration_endpoint: https://oauth.enigma.com/register
    note: >-
      RFC 7591 dynamic client registration is open, which is what lets an arbitrary MCP client
      onboard without a pre-provisioned client_id — the mechanism the MCP authorization spec relies on.
  revocation_endpoint: https://oauth.enigma.com/revoke
  introspection_endpoint: https://oauth.enigma.com/introspect
  jwks_uri: https://cognito-idp.us-east-1.amazonaws.com/us-east-1_00OC0VOa2/.well-known/jwks.json
  identity_provider: Amazon Cognito (us-east-1)
scopes:
- name: openid
  description: >-
    The only scope advertised in `scopes_supported`. There is no per-tool, per-dataset or
    read/write scope decomposition — an authorized MCP client receives the whole tool surface, and
    access is bounded by plan and by the per-tool rate limits rather than by scope.
  source: https://mcp.enigma.com/.well-known/oauth-authorization-server
scope_count: 1
gaps:
- >-
    No granular scopes. A KYB/sanctions dataset is exactly the surface where an agent operator would
    want to grant `screening:read` without `card-analytics:read`; today that separation does not
    exist at the token layer.
- No OpenID Connect discovery document (/.well-known/openid-configuration 404s on every host) despite `openid` being the advertised scope.
x-evidence:
  fetched: '2026-08-14'
  url: https://mcp.enigma.com/.well-known/oauth-authorization-server
  http_status: 200
  content_type: application/json

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/enigma-analytics-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.