Newcastle Permanent Building Society · OAuth Scopes

Newcastle Permanent Building Society OAuth Scopes

OAuth 2.0 searched

Newcastle Permanent Building Society publishes 12 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Newcastle Permanent Building Society API on a user’s behalf.

Tokens are issued from https://openbank-secure.newcastlepermanent.com.au/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

FinancialBanksOpen BankingCDRConsumer BankingBuilding SocietyMutualAustralia

Scopes: 12 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://openbank.newcastlepermanent.com.au/oauth2/authorize

Token URL
https://openbank-secure.newcastlepermanent.com.au/oauth2/token

Flows
authorizationCode

Scopes (12)

Scope	Description	Flows
openid	OpenID Connect authentication
profile	End-user profile claims
common:customer.basic:read	Read basic customer information (name
common:customer.detail:read	Read detailed customer information (contact details)
bank:accounts.basic:read	Read basic banking account information
bank:accounts.detail:read	Read detailed banking account information
bank:transactions:read	Read banking account transactions
bank:payees:read	Read saved payees
bank:regular_payments:read	Read direct debits and scheduled/regular payments
admin:metrics.basic:read	CDR admin metrics (Get Metrics) for the data holder
admin:metadata:update	CDR admin metadata update (register metadata refresh)
cdr:registration	Dynamic client registration for CDR software products

📄 Provider scope reference: https://consumerdatastandardsaustralia.github.io/standards/#security-profile

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://openbank.newcastlepermanent.com.au/.well-known/openid-configuration
docs: https://consumerdatastandardsaustralia.github.io/standards/#security-profile
notes: >-
  OAuth2 / OpenID Connect scopes advertised by Newcastle Permanent's live CDR
  authorization server, harvested verbatim from its OpenID Connect discovery
  document (scopes_supported). These are the standardised CDR banking + common
  scopes; they gate the accredited-data-recipient (ADR) consumer-data-sharing
  surface, NOT the public Product Reference Data endpoints (which are
  unauthenticated). token_endpoint_auth_methods_supported = private_key_jwt and a
  pushed_authorization_request_endpoint are present, consistent with the FAPI
  security profile the CDS mandates.
schemes:
  - name: cdr-oidc
    type: openIdConnect
    issuer: https://openbank.newcastlepermanent.com.au
    flows:
      - flow: authorizationCode
        authorizationUrl: https://openbank.newcastlepermanent.com.au/oauth2/authorize
        tokenUrl: https://openbank-secure.newcastlepermanent.com.au/oauth2/token
        parEndpoint: https://openbank-secure.newcastlepermanent.com.au/api/openbanking/push-authorization/par
        registrationEndpoint: https://openbank-secure.newcastlepermanent.com.au/open-banking/0.2/register
        jwksUri: https://openbank.newcastlepermanent.com.au/oauth2/jwks
        tokenEndpointAuthMethods: [private_key_jwt]
    sources: [https://openbank.newcastlepermanent.com.au/.well-known/openid-configuration]
scopes:
  - {scope: openid, description: OpenID Connect authentication}
  - {scope: profile, description: End-user profile claims}
  - {scope: 'common:customer.basic:read', description: Read basic customer information (name, occupation)}
  - {scope: 'common:customer.detail:read', description: Read detailed customer information (contact details)}
  - {scope: 'bank:accounts.basic:read', description: Read basic banking account information}
  - {scope: 'bank:accounts.detail:read', description: Read detailed banking account information}
  - {scope: 'bank:transactions:read', description: Read banking account transactions}
  - {scope: 'bank:payees:read', description: Read saved payees}
  - {scope: 'bank:regular_payments:read', description: Read direct debits and scheduled/regular payments}
  - {scope: 'admin:metrics.basic:read', description: CDR admin metrics (Get Metrics) for the data holder}
  - {scope: 'admin:metadata:update', description: CDR admin metadata update (register metadata refresh)}
  - {scope: 'cdr:registration', description: Dynamic client registration for CDR software products}