Parsley Health · OAuth Scopes

Parsley Health OAuth Scopes

OAuth 2.0 probed

Parsley Health uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyHealthHealthcareTelehealthTelemedicineFunctional MedicinePrimary CareWellnessNutritionDiagnosticsLab TestingMembershipDigital HealthConsumer HealthEcommerceAgentic CommerceMCPSupplements
Scopes: 0 Flows: Method: probed

Scopes (0)

Parsley Health implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

These are the OAuth 2.0 / OIDC scopes advertised by the authorization server discovered on Parsley Health's store hostname. They govern customer accounts for the Parsley Health supplement store only. The authorization server is Shopify's per-shop issuer (shop 24996151350) — Parsley Health publishes no scope reference of its own, and there are no clinical, member or medical-record scopes anywhere on its public surface. Descriptions below are the platform's documented meaning; only the scope STRINGS are verbatim from the discovery document.

Source

OAuth Scopes

parsley-health-scopes.yml Raw ↑
generated: '2026-08-15'
method: probed
source: >-
  https://store.parsleyhealth.com/.well-known/openid-configuration and
  https://store.parsleyhealth.com/.well-known/oauth-authorization-server
  (both HTTP 200, scopes_supported read verbatim, 2026-08-15)
docs: https://shopify.dev/docs/api/customer
note: >-
  These are the OAuth 2.0 / OIDC scopes advertised by the authorization server discovered
  on Parsley Health's store hostname. They govern customer accounts for the Parsley
  Health supplement store only. The authorization server is Shopify's per-shop issuer
  (shop 24996151350) — Parsley Health publishes no scope reference of its own, and there
  are no clinical, member or medical-record scopes anywhere on its public surface.
  Descriptions below are the platform's documented meaning; only the scope STRINGS are
  verbatim from the discovery document.
authorization_server: https://shopify.com/authentication/24996151350
scope_count: 4
scopes:
- name: openid
  description: Standard OIDC scope — request an ID token for the authenticated store customer.
  standard: true
- name: email
  description: Standard OIDC scope — release the customer's email address and email_verified claim.
  standard: true
- name: customer-account-api:full
  description: Full access to the store's Customer Account API on behalf of the signed-in customer (orders, addresses, profile).
  standard: false
- name: customer-account-mcp-api:full
  description: >-
    Full access to the customer-account MCP API on behalf of the signed-in customer — the
    authenticated counterpart to the anonymous UCP/MCP commerce endpoint.
  standard: false
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]
not_found:
- surface: clinical / member API
  note: No OAuth scopes of any kind are published for the Parsley Health medical practice or member application.