Genentech · OAuth Scopes

Genentech OAuth Scopes

OAuth 2.0 searched

Genentech publishes 36 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Genentech API on a user’s behalf.

Tokens are issued from https://developer.gene.com/services/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyBiotechnologyPharmaceuticalsHealthcareLife SciencesFHIRPatient Support ServicesDrug DiscoveryGenomics
Scopes: 36 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://developer.gene.com/services/oauth2/authorize
Token URL
https://developer.gene.com/services/oauth2/token
Flows
authorizationCode

Scopes (36)

ScopeDescriptionFlows
openid OpenID Connect authentication.
profile Access to the user's basic profile claims.
email Access to the user's email address.
address Access to the user's address claim.
phone Access to the user's phone number claim.
api Access to platform REST/SOAP API resources.
web Web access to the org on behalf of the user.
full Full access to all resources the user can access.
id Access to the identity URL service.
refresh_token Issue a refresh token for long-lived access.
offline_access Maintain access when the user is offline.
lightning Access to Lightning Experience resources.
visualforce Access to Visualforce pages.
content Access to content/file resources.
chatter_api Access to Chatter REST API resources.
user_registration_api Self-registration handler API.
pwdless_login_api Passwordless login API.
forgot_password Forgot-password flow.
custom_permissions Access to the user's custom permissions.
interaction_api Interaction Studio / interaction API.
cdp_api Data Cloud (CDP) API.
cdp_ingest_api Data Cloud ingestion API.
cdp_query_api Data Cloud query API.
cdp_profile_api Data Cloud profile API.
cdp_segment_api Data Cloud segmentation API.
cdp_identityresolution_api Data Cloud identity resolution API.
cdp_calculated_insight_api Data Cloud calculated insights API.
data_cloud_user_claims Data Cloud user claims.
einstein_gpt_api Einstein GPT / generative AI API.
sfap_api Salesforce AI platform API.
mcp_api Model Context Protocol API scope.
chatbot_api Einstein Bots / chatbot API.
wave_api CRM Analytics (Wave) API.
eclair_api CRM Analytics Eclair charting API.
pardot_api Account Engagement (Pardot) API.
scrt_api Service Cloud real-time (SCRT) API.

Source

OAuth Scopes

genentech-scopes.yml Raw ↑
generated: '2026-07-19'
method: searched
source: https://developer.gene.com/.well-known/openid-configuration
docs: https://developer.gene.com/s/api-library
notes: >-
  Scopes are taken verbatim from the `scopes_supported` array advertised by the
  Genentech Developer Portal OpenID Connect discovery document. The portal runs
  on Salesforce Experience Cloud, so these are the platform's standard OAuth2
  scopes exposed by the identity provider, not per-resource FHIR UAPI business
  scopes (the UAPI itself is gated by registration + per-organization API keys
  through the Integration Marketplace). Captured for auth-clarity signal.
schemes:
- name: oauth2
  source: well-known/genentech-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://developer.gene.com/services/oauth2/authorize
    tokenUrl: https://developer.gene.com/services/oauth2/token
scopes:
- scope: openid
  description: OpenID Connect authentication.
- scope: profile
  description: Access to the user's basic profile claims.
- scope: email
  description: Access to the user's email address.
- scope: address
  description: Access to the user's address claim.
- scope: phone
  description: Access to the user's phone number claim.
- scope: api
  description: Access to platform REST/SOAP API resources.
- scope: web
  description: Web access to the org on behalf of the user.
- scope: full
  description: Full access to all resources the user can access.
- scope: id
  description: Access to the identity URL service.
- scope: refresh_token
  description: Issue a refresh token for long-lived access.
- scope: offline_access
  description: Maintain access when the user is offline.
- scope: lightning
  description: Access to Lightning Experience resources.
- scope: visualforce
  description: Access to Visualforce pages.
- scope: content
  description: Access to content/file resources.
- scope: chatter_api
  description: Access to Chatter REST API resources.
- scope: user_registration_api
  description: Self-registration handler API.
- scope: pwdless_login_api
  description: Passwordless login API.
- scope: forgot_password
  description: Forgot-password flow.
- scope: custom_permissions
  description: Access to the user's custom permissions.
- scope: interaction_api
  description: Interaction Studio / interaction API.
- scope: cdp_api
  description: Data Cloud (CDP) API.
- scope: cdp_ingest_api
  description: Data Cloud ingestion API.
- scope: cdp_query_api
  description: Data Cloud query API.
- scope: cdp_profile_api
  description: Data Cloud profile API.
- scope: cdp_segment_api
  description: Data Cloud segmentation API.
- scope: cdp_identityresolution_api
  description: Data Cloud identity resolution API.
- scope: cdp_calculated_insight_api
  description: Data Cloud calculated insights API.
- scope: data_cloud_user_claims
  description: Data Cloud user claims.
- scope: einstein_gpt_api
  description: Einstein GPT / generative AI API.
- scope: sfap_api
  description: Salesforce AI platform API.
- scope: mcp_api
  description: Model Context Protocol API scope.
- scope: chatbot_api
  description: Einstein Bots / chatbot API.
- scope: wave_api
  description: CRM Analytics (Wave) API.
- scope: eclair_api
  description: CRM Analytics Eclair charting API.
- scope: pardot_api
  description: Account Engagement (Pardot) API.
- scope: scrt_api
  description: Service Cloud real-time (SCRT) API.