Morf · OAuth Scopes

Morf OAuth Scopes

OAuth 2.0 searched

Morf publishes 6 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Morf API on a user’s behalf.

Tokens are issued from https://auth.morf.health/v1/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthcareHealth ITAutomationIntegrationiPaaSWebhooksEHRPatient CommunicationHIPAAWorkflowDigital Health

Scopes: 6 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://dashboard.morf.health/authorize

Token URL
https://auth.morf.health/v1/oauth2/token

Flows
authorizationCode

Scopes (6)

Scope	Description	Flows
openid	OpenID Connect sign-in; returns an ID token.	authorizationCode
profile	Access to the end user's basic profile claims.	authorizationCode
email	Access to the end user's email address claim.	authorizationCode
phone	Access to the end user's phone number claim.	authorizationCode
offline_access	Issue a refresh token for long-lived, offline API access.	authorizationCode
full_access	Full access scope advertised by the OpenID Connect discovery document (scopes_supported). Grants broad access to the Morf API.	authorizationCode

📄 Provider scope reference: https://docs.morf.health/

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://auth.morf.health/.well-known/openid-configuration
docs: https://docs.morf.health/
schemes:
- name: OAuth2
  source: well-known/morf-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://dashboard.morf.health/authorize
    tokenUrl: https://auth.morf.health/v1/oauth2/token
scopes:
- scope: openid
  description: OpenID Connect sign-in; returns an ID token.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
- scope: profile
  description: Access to the end user's basic profile claims.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
- scope: email
  description: Access to the end user's email address claim.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
- scope: phone
  description: Access to the end user's phone number claim.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
- scope: offline_access
  description: Issue a refresh token for long-lived, offline API access.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
- scope: full_access
  description: >-
    Full access scope advertised by the OpenID Connect discovery document
    (scopes_supported). Grants broad access to the Morf API.
  flows: [authorizationCode]
  sources: [well-known/morf-openid-configuration.json]
notes: >-
  Scopes harvested verbatim from the live OpenID Connect discovery document
  scopes_supported list. The API-host RFC 8414 document advertises only the
  "email" scope; the auth-host OIDC document is the fuller set captured here.