Honey Insurance · OAuth Scopes

Honey Insurance OAuth Scopes

OAuth 2.0 searched

Honey Insurance publishes 14 OAuth 2.0 scopes via the authorizationCode, implicit, clientCredentials, and deviceCode flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Honey Insurance API on a user’s behalf.

Tokens are issued from https://auth.honeyinsurance.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

InsuranceAustraliaInsurtechHome InsuranceProperty and CasualtyPersonal LinesDirect to ConsumerEmbedded InsuranceSmart HomeClaimsUnderwriting

Scopes: 14 Flows: authorizationCode, implicit, clientCredentials, deviceCode Method: searched

OAuth endpoints

Authorization URL
https://auth.honeyinsurance.com/authorize

Token URL
https://auth.honeyinsurance.com/oauth/token

Flows
authorizationCodeimplicitclientCredentialsdeviceCode

Scopes (14)

Scope	Description	Flows
openid	Request an ID token — the base OpenID Connect scope.
profile	Access the end user's default profile claims.
offline_access	Request a refresh token for long-lived sessions.
email	Access the end user's email address.
email_verified	Access whether the end user's email address has been verified.
address	Access the end user's postal address claim.
phone	Access the end user's phone number claim.
name	Access the end user's full name.
given_name	Access the end user's given name.
family_name	Access the end user's family name.
nickname	Access the end user's nickname.
picture	Access the end user's profile picture URL.
created_at	Access the account creation timestamp.
identities	Access the linked identity providers on the Auth0 user record.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-25'
method: searched
source: https://auth.honeyinsurance.com/.well-known/openid-configuration
docs: null
note: >-
  These are the scopes advertised by Honey Insurance's Auth0 custom-domain
  tenant, harvested anonymously from OIDC discovery on 2026-07-25. They are the
  stock OpenID Connect profile claims that Auth0 ships by default — there is no
  insurance-domain scope (no quote, bind, policy, claim or document scope), no
  published API audience to request an access token for, and no developer
  credential path. Treat this as consumer account sign-in, not an API
  authorization surface. Nothing here was derived from an OpenAPI definition,
  because Honey publishes none.
schemes:
- name: Auth0OIDC
  type: openIdConnect
  source: well-known/honey-insurance-openid-configuration.json
  issuer: https://auth.honeyinsurance.com/
  flows:
  - flow: authorizationCode
    authorizationUrl: https://auth.honeyinsurance.com/authorize
    tokenUrl: https://auth.honeyinsurance.com/oauth/token
  - flow: implicit
    authorizationUrl: https://auth.honeyinsurance.com/authorize
  - flow: clientCredentials
    tokenUrl: https://auth.honeyinsurance.com/oauth/token
  - flow: deviceCode
    deviceAuthorizationUrl: https://auth.honeyinsurance.com/oauth/device/code
    tokenUrl: https://auth.honeyinsurance.com/oauth/token
scopes:
- scope: openid
  description: Request an ID token — the base OpenID Connect scope.
  kind: oidc-standard
- scope: profile
  description: Access the end user's default profile claims.
  kind: oidc-standard
- scope: offline_access
  description: Request a refresh token for long-lived sessions.
  kind: oidc-standard
- scope: email
  description: Access the end user's email address.
  kind: oidc-standard
- scope: email_verified
  description: Access whether the end user's email address has been verified.
  kind: oidc-standard
- scope: address
  description: Access the end user's postal address claim.
  kind: oidc-standard
- scope: phone
  description: Access the end user's phone number claim.
  kind: oidc-standard
- scope: name
  description: Access the end user's full name.
  kind: profile-claim
- scope: given_name
  description: Access the end user's given name.
  kind: profile-claim
- scope: family_name
  description: Access the end user's family name.
  kind: profile-claim
- scope: nickname
  description: Access the end user's nickname.
  kind: profile-claim
- scope: picture
  description: Access the end user's profile picture URL.
  kind: profile-claim
- scope: created_at
  description: Access the account creation timestamp.
  kind: auth0-extension
- scope: identities
  description: Access the linked identity providers on the Auth0 user record.
  kind: auth0-extension
domain_scopes:
  present: false
  note: >-
    No quote, bind, issue, policy, claim (FNOL), document or payment scope is
    published. The four insurance verbs exist only as consumer web and telephone
    journeys — see review.yml findings.insuranceVerbs.
related:
  authentication: authentication/honey-insurance-authentication.yml
  well_known: well-known/honey-insurance-well-known.yml