IMB Bank · OAuth Scopes

IMB Bank OAuth Scopes

OAuth 2.0 searched

IMB Bank publishes 12 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the IMB Bank API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingAustraliaMutual BankProduct Reference Data

Scopes: 12 Flows: Method: searched

Scopes (12)

Scope	Description	Flows
openid	OpenID Connect authentication; issue an ID token for the CDR consumer.	authorizationCode
profile	End-user profile claims (name, given_name, family_name).	authorizationCode
common:customer.basic:read	Read the basic customer record (name and occupation / organisation type).	authorizationCode
common:customer.detail:read	Read customer contact details (address, phone, email).	authorizationCode
bank:accounts.basic:read	Read basic account data (account name, type, balance, product category).	authorizationCode
bank:accounts.detail:read	Read detailed account data (account numbers, features, fees, rates).	authorizationCode
bank:transactions:read	Read account transactions (amounts, descriptions, timestamps).	authorizationCode
bank:payees:read	Read the customer's saved payees.	authorizationCode
bank:regular_payments:read	Read direct debits and scheduled/regular payments.	authorizationCode
admin:metrics.basic:read	Data-holder admin scope for the CDR Get Metrics reporting endpoint.	clientCredentials
admin:metadata:update	Data-holder admin scope for CDR Register metadata update notifications.	clientCredentials
cdr:registration	Dynamic Client Registration (DCR) scope for accredited data recipients.	clientCredentials

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#end-points

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://openbank.openbanking.imb.com.au/.well-known/openid-configuration
docs: https://consumerdatastandardsaustralia.github.io/standards/#end-points
note: Scopes captured verbatim from IMB's live OIDC discovery document (scopes_supported).
  Descriptions follow the Australian Consumer Data Standards (CDS) authorisation scopes
  for the banking sector. Access to member banking data requires the CDR consent flow
  (PAR + private_key_jwt + mTLS); the public Product Reference Data API is unauthenticated
  and requires no scope.
schemes:
- name: OpenIDConnect
  source: well-known/imb-bank-openid-configuration.json
  issuer: https://openbank.openbanking.imb.com.au
  authorization_endpoint: https://auth.openbanking.imb.com.au/oauth2/authorize
  token_endpoint: https://openbank-secure.openbanking.imb.com.au/oauth2/token
  pushed_authorization_request_endpoint: https://openbank-secure.openbanking.imb.com.au/api/openbanking/push-authorization/par
  registration_endpoint: https://openbank-secure.openbanking.imb.com.au/open-banking/0.2/register
  grant_types: [authorization_code, client_credentials, refresh_token]
  acr_values: [urn:cds.au:cdr:2]
scopes:
- scope: openid
  description: OpenID Connect authentication; issue an ID token for the CDR consumer.
  flows: [authorizationCode]
- scope: profile
  description: End-user profile claims (name, given_name, family_name).
  flows: [authorizationCode]
- scope: common:customer.basic:read
  description: Read the basic customer record (name and occupation / organisation type).
  flows: [authorizationCode]
- scope: common:customer.detail:read
  description: Read customer contact details (address, phone, email).
  flows: [authorizationCode]
- scope: bank:accounts.basic:read
  description: Read basic account data (account name, type, balance, product category).
  flows: [authorizationCode]
- scope: bank:accounts.detail:read
  description: Read detailed account data (account numbers, features, fees, rates).
  flows: [authorizationCode]
- scope: bank:transactions:read
  description: Read account transactions (amounts, descriptions, timestamps).
  flows: [authorizationCode]
- scope: bank:payees:read
  description: Read the customer's saved payees.
  flows: [authorizationCode]
- scope: bank:regular_payments:read
  description: Read direct debits and scheduled/regular payments.
  flows: [authorizationCode]
- scope: admin:metrics.basic:read
  description: Data-holder admin scope for the CDR Get Metrics reporting endpoint.
  flows: [clientCredentials]
- scope: admin:metadata:update
  description: Data-holder admin scope for CDR Register metadata update notifications.
  flows: [clientCredentials]
- scope: cdr:registration
  description: Dynamic Client Registration (DCR) scope for accredited data recipients.
  flows: [clientCredentials]