Parsley Health OAuth Scopes

generated: '2026-08-15'
method: probed
source: >-
  https://store.parsleyhealth.com/.well-known/openid-configuration and
  https://store.parsleyhealth.com/.well-known/oauth-authorization-server
  (both HTTP 200, scopes_supported read verbatim, 2026-08-15)
docs: https://shopify.dev/docs/api/customer
note: >-
  These are the OAuth 2.0 / OIDC scopes advertised by the authorization server discovered
  on Parsley Health's store hostname. They govern customer accounts for the Parsley
  Health supplement store only. The authorization server is Shopify's per-shop issuer
  (shop 24996151350) — Parsley Health publishes no scope reference of its own, and there
  are no clinical, member or medical-record scopes anywhere on its public surface.
  Descriptions below are the platform's documented meaning; only the scope STRINGS are
  verbatim from the discovery document.
authorization_server: https://shopify.com/authentication/24996151350
scope_count: 4
scopes:
- name: openid
  description: Standard OIDC scope — request an ID token for the authenticated store customer.
  standard: true
- name: email
  description: Standard OIDC scope — release the customer's email address and email_verified claim.
  standard: true
- name: customer-account-api:full
  description: Full access to the store's Customer Account API on behalf of the signed-in customer (orders, addresses, profile).
  standard: false
- name: customer-account-mcp-api:full
  description: >-
    Full access to the customer-account MCP API on behalf of the signed-in customer — the
    authenticated counterpart to the anonymous UCP/MCP commerce endpoint.
  standard: false
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]
not_found:
- surface: clinical / member API
  note: No OAuth scopes of any kind are published for the Parsley Health medical practice or member application.