McMaster University OAuth Scopes

OAuth 2.0 probed

McMaster University uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

UniversityHigher EducationEducationCanadaOntarioU15 Group of Canadian Research UniversitiesResearchResearch DataResearch RepositoryIdentity FederationScholarly CommunicationOpen AccessLibraryCourse Catalog

Scopes: 0 Flows: Method: probed

Scopes (0)

McMaster University implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

No OAuth scopes exist on any McMaster-operated surface. This file records that absence with evidence rather than leaving the artifact unwritten, and records the SAML attribute release that stands in place of scopes on the federation surface.

📄 Provider scope reference:

Source

OAuth Scopes

# x-method is the AUTHORSHIP vocabulary build-provenance-manifest.py reads (who wrote the
# file: we did). `method: probed` below is the university-pipeline PROVENANCE vocabulary
# (how we came to hold it: live probe). Two axes, two keys, neither guessed.
x-method: generated
version: '0.1'
generated: '2026-09-01'
method: probed
source: https://experts.mcmaster.ca/api/search
note: >-
  No OAuth scopes exist on any McMaster-operated surface. This file records that absence with
  evidence rather than leaving the artifact unwritten, and records the SAML attribute release that
  stands in place of scopes on the federation surface.
oauth_scopes: []
oauth_scopes_detail: >-
  The McMaster Experts API is unauthenticated and declares no securitySchemes, so there is nothing
  to scope. The Azure API Management portal at developer.api.mcmaster.ca issues subscription keys
  per product after MacID sign-in, but the product list is gated and no scope or product name could
  be read anonymously.
federation_attribute_release:
  surface: https://sso.mcmaster.ca/idp/shibboleth
  x-operator: federation
  detail: >-
    A Shibboleth IdP's equivalent of scopes is its attribute release policy, which is negotiated per
    service provider and is not published in the entity metadata. The metadata does assert
    shibmd:Scope mcmaster.ca, which bounds every scoped attribute (eduPersonPrincipalName,
    eduPersonScopedAffiliation) the IdP may assert.
  evidence:
    - url: https://sso.mcmaster.ca/idp/shibboleth
      status: 200
      locator: Extensions/shibmd:Scope regexp="false" = "mcmaster.ca"

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/mcmaster-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.