Photon · OAuth Scopes

Photon OAuth Scopes

OAuth 2.0 searched

Photon publishes 6 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Photon API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

HealthcareUnited Statese-PrescribingPharmacyPrescription RoutingGraphQLClinical APIDigital HealthBenefit CheckOAuth2
Scopes: 6 Flows: Method: searched

Scopes (6)

ScopeDescriptionFlows
read:patient Read access to patient records. clientCredentials
write:patient Create and update patient records (e.g. createPatient). clientCredentials
read:prescription Read access to prescriptions. clientCredentials
write:prescription Create/modify prescriptions. Restricted - granted only to authorized providers via user access tokens; not available to M2M tokens. clientCredentials
read:order Read access to orders and fulfillment. clientCredentials
write:order Create and modify orders (routing, reroute, resend). clientCredentials

Source

OAuth Scopes

photon-scopes.yml Raw ↑
generated: '2026-07-24'
method: searched
source: https://docs.photon.health/docs/authentication
docs: https://docs.photon.health/docs/authentication
provider: Auth0
audience:
  production: https://api.photon.health
  sandbox: https://api.neutron.health
schemes:
- name: OAuth2ClientCredentials
  flow: clientCredentials
  token_url: https://auth.photon.health/oauth/token
scopes:
- scope: read:patient
  description: Read access to patient records.
  flows: [clientCredentials]
- scope: write:patient
  description: Create and update patient records (e.g. createPatient).
  flows: [clientCredentials]
- scope: read:prescription
  description: Read access to prescriptions.
  flows: [clientCredentials]
- scope: write:prescription
  description: Create/modify prescriptions. Restricted - granted only to authorized providers via user access tokens; not available to M2M tokens.
  flows: [clientCredentials]
  restricted: true
- scope: read:order
  description: Read access to orders and fulfillment.
  flows: [clientCredentials]
- scope: write:order
  description: Create and modify orders (routing, reroute, resend).
  flows: [clientCredentials]
notes: >-
  Scopes above are the Photon API application scopes documented on the auth page.
  The Auth0 authorization server additionally advertises standard OIDC scopes
  (openid, profile, offline_access, email) in its openid-configuration; those are
  identity scopes, not API-resource scopes. write:prescription is the only
  restricted resource scope.