Funnel · OAuth Scopes

Funnel OAuth Scopes

OAuth 2.0 probed

Funnel uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyMarketingMarketing IntelligenceMarketing DataAnalyticsAdvertisingData IntegrationETLData WarehouseAttributionReportingBusiness IntelligenceMCPAI AgentsMarketing Mix Modeling

Scopes: 0 Flows: Method: probed

Scopes (0)

Funnel implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference: https://help.funnel.io/en/articles/15014203-quick-start-guide-using-funnel-mcp

Source

OAuth Scopes

generated: '2026-08-12'
method: probed
source: >-
  https://mcp.ai.funnel.io/.well-known/oauth-protected-resource/mcp +
  https://mcp.eu.ai.funnel.io/.well-known/oauth-protected-resource/mcp +
  https://login.funnel.io/.well-known/openid-configuration
docs: https://help.funnel.io/en/articles/15014203-quick-start-guide-using-funnel-mcp
authorization_server: https://login.funnel.io
identity_provider: Auth0
surfaces:
- api: Funnel MCP
  resource: https://mcp.ai.funnel.io/mcp
  flow: authorization_code
  metadata: well-known/funnel-mcp-oauth-protected-resource.json
  http_status: 200
  scopes:
  - name: openid
    required: true
    description: OIDC subject identity. Issues an ID token identifying the Funnel user.
  - name: profile
    required: false
    description: Standard OIDC profile claims (name, given_name, family_name, nickname, picture).
  - name: email
    required: false
    description: Standard OIDC email claims (email, email_verified).
  - name: offline_access
    required: false
    description: >-
      Issues a refresh token so the MCP client can keep the connection alive without a fresh
      browser sign-in. Its absence is what surfaces as the "Connection has expired" reconnect
      prompt Funnel documents for Claude.
- api: Funnel MCP (EU)
  resource: https://mcp.eu.ai.funnel.io/mcp
  flow: authorization_code
  metadata: well-known/funnel-mcp-eu-oauth-protected-resource.json
  http_status: 200
  scopes:
  - name: openid
  - name: profile
  - name: email
  - name: offline_access
- api: Funnel Control Plane API
  resource: https://controlplane.setup.us.funnel.io
  flow: client_credentials
  scopes: []
  scopes_note: >-
    No OAuth scopes are used. The system-user client-credentials grant is authorized by audience
    (https://controlplane.setup.{us,eu}.funnel.io) and scoped by subscription_id, not by scope
    strings. See authentication/funnel-authentication.yml.
authorization_server_scopes_supported:
- openid
- profile
- offline_access
- name
- given_name
- family_name
- nickname
- email
- email_verified
- picture
- created_at
- identities
- phone
- address
authorization_server_note: >-
  The list above is what the Auth0 tenant advertises in scopes_supported; only the four scopes in
  the MCP protected-resource metadata are actually requested for the Funnel MCP resource.
authorization_model:
  granularity: identity-only
  detail: >-
    Funnel does not publish any resource- or action-scoped OAuth scopes. Authorization for MCP is
    entirely delegated to the signed-in Funnel user's own workspace permissions, and the whole MCP
    surface is read-only by construction. There is therefore no way for a consumer to request a
    narrower grant than "everything this user can read".
notes: >-
  Probed anonymously from the RFC 9728 Protected Resource Metadata documents Funnel serves on both
  regional MCP hosts. Nothing here is derived from an OpenAPI spec — Funnel publishes none.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/funnel-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.