Lemon Perfect · OAuth Scopes

Lemon Perfect OAuth Scopes

OAuth 2.0 probed

Lemon Perfect publishes 4 OAuth 2.0 scopes via the authorizationCode, refreshToken, and jwtBearer flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Lemon Perfect API on a user’s behalf.

Tokens are issued from https://shopify.com/authentication/3205202020/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyBeveragesConsumer Packaged GoodsE-CommerceRetailDirect to ConsumerAgentic CommerceMCPGraphQLUniversal Commerce ProtocolShopify

Scopes: 4 Flows: authorizationCode, refreshToken, jwtBearer Method: probed

OAuth endpoints

Authorization URL
https://shopify.com/authentication/3205202020/oauth/authorize

Token URL
https://shopify.com/authentication/3205202020/oauth/token

Flows
authorizationCoderefreshTokenjwtBearer

Scopes (4)

Scope	Description	Flows
openid	OpenID Connect — request an ID token identifying the signed-in customer.	authorizationCode
email	Release the customer's email address and email_verified claim.	authorizationCode
customer-account-api:full	Full access to the Customer Account API on behalf of the signed-in customer (orders, addresses, profile, subscriptions).	authorizationCode, refreshToken
customer-account-mcp-api:full	Full access to the customer account MCP API — the authenticated, customer-scoped counterpart to the store's anonymous UCP/MCP commerce endpoint.	authorizationCode, refreshToken

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-04'
method: probed
source: https://lemonperfect.com/.well-known/openid-configuration
note: >-
  Scopes are taken verbatim from the `scopes_supported` array of the OIDC
  discovery / RFC 8414 metadata that lemonperfect.com serves for its Shopify
  Customer Accounts authorization server. No OpenAPI oauth2 securityScheme
  exists for this provider; nothing here is inferred.
schemes:
- name: CustomerAccountsOIDC
  type: openIdConnect
  source: well-known/lemon-perfect-openid-configuration.json
  issuer: https://shopify.com/authentication/3205202020
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/3205202020/oauth/authorize
    tokenUrl: https://shopify.com/authentication/3205202020/oauth/token
    pkce: S256
  - flow: refreshToken
    tokenUrl: https://shopify.com/authentication/3205202020/oauth/token
  - flow: jwtBearer
    grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer'
    tokenUrl: https://shopify.com/authentication/3205202020/oauth/token
scopes:
- scope: openid
  description: OpenID Connect — request an ID token identifying the signed-in customer.
  flows: [authorizationCode]
  sources: [well-known/lemon-perfect-openid-configuration.json]
- scope: email
  description: Release the customer's email address and email_verified claim.
  flows: [authorizationCode]
  sources: [well-known/lemon-perfect-openid-configuration.json]
- scope: 'customer-account-api:full'
  description: >-
    Full access to the Customer Account API on behalf of the signed-in customer
    (orders, addresses, profile, subscriptions).
  flows: [authorizationCode, refreshToken]
  sources: [well-known/lemon-perfect-openid-configuration.json]
- scope: 'customer-account-mcp-api:full'
  description: >-
    Full access to the customer account MCP API — the authenticated,
    customer-scoped counterpart to the store's anonymous UCP/MCP commerce
    endpoint.
  flows: [authorizationCode, refreshToken]
  sources: [well-known/lemon-perfect-openid-configuration.json]
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]
x-evidence:
  fetched: '2026-08-04'
  url: https://lemonperfect.com/.well-known/openid-configuration
  http_status: 200
  content_type: application/json

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/lemon-perfect-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.