Picarro · OAuth Scopes

Picarro OAuth Scopes

OAuth 2.0 probed

Picarro publishes 9 OAuth 2.0 scopes via the authorizationCode, implicit, password, and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Picarro API on a user’s behalf.

Tokens are issued from https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyGas DetectionEnvironmental MonitoringEmissionsMethaneGreenhouse GasScientific InstrumentsSemiconductorIndustrial IoTSensorsAnalyticsgRPC

Scopes: 9 Flows: authorizationCode, implicit, password, clientCredentials Method: probed

OAuth endpoints

Authorization URL
https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/auth

Token URL
https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/token

Flows
authorizationCodeimplicitpasswordclientCredentials

Scopes (9)

Scope	Description	Flows
openid	OpenID Connect authentication; requests an ID token.	authorizationCode, implicit
profile	Standard OIDC profile claims (name, given_name, family_name, preferred_username).	authorizationCode, implicit, password
email	Standard OIDC email claim.	authorizationCode, implicit, password
address	Standard OIDC address claim.	authorizationCode, implicit, password
phone	Standard OIDC phone_number claims.	authorizationCode, implicit, password
roles	Keycloak realm/client role mappings in the access token.	authorizationCode, password, clientCredentials
offline_access	Issues a refresh token usable while the user is offline.	authorizationCode, password
web-origins	Keycloak scope that injects allowed CORS web origins into the token.	authorizationCode, implicit
microprofile-jwt	Keycloak scope adding MicroProfile JWT claims (upn, groups).	authorizationCode, clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-02'
method: probed
source: https://identity-prod.picarro.com/auth/realms/picarro/.well-known/openid-configuration
notes: >-
  Picarro publishes no OpenAPI with oauth2 securitySchemes. These scopes are the
  scopes_supported list advertised anonymously by the Keycloak realm that fronts the
  P-Cubed cloud platform. They are the stock Keycloak/OIDC scope set — Picarro publishes
  no product-specific API scope reference, and no public scopes documentation page was
  found.
schemes:
  - name: PicarroIdentityOIDC
    source: well-known/picarro-openid-configuration.json
    issuer: https://identity-prod.picarro.com/auth/realms/picarro
    flows:
      - flow: authorizationCode
        authorizationUrl: https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/auth
        tokenUrl: https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/token
      - flow: implicit
        authorizationUrl: https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/auth
      - flow: password
        tokenUrl: https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/token
      - flow: clientCredentials
        tokenUrl: https://identity-prod.picarro.com/auth/realms/picarro/protocol/openid-connect/token
scopes:
  - scope: openid
    description: OpenID Connect authentication; requests an ID token.
    flows: [authorizationCode, implicit]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: profile
    description: Standard OIDC profile claims (name, given_name, family_name, preferred_username).
    flows: [authorizationCode, implicit, password]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: email
    description: Standard OIDC email claim.
    flows: [authorizationCode, implicit, password]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: address
    description: Standard OIDC address claim.
    flows: [authorizationCode, implicit, password]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: phone
    description: Standard OIDC phone_number claims.
    flows: [authorizationCode, implicit, password]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: roles
    description: Keycloak realm/client role mappings in the access token.
    flows: [authorizationCode, password, clientCredentials]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: offline_access
    description: Issues a refresh token usable while the user is offline.
    flows: [authorizationCode, password]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: web-origins
    description: Keycloak scope that injects allowed CORS web origins into the token.
    flows: [authorizationCode, implicit]
    sources: [well-known/picarro-openid-configuration.json]
  - scope: microprofile-jwt
    description: Keycloak scope adding MicroProfile JWT claims (upn, groups).
    flows: [authorizationCode, clientCredentials]
    sources: [well-known/picarro-openid-configuration.json]
x-evidence:
  fetched: '2026-08-02'
  url: https://identity-prod.picarro.com/auth/realms/picarro/.well-known/openid-configuration
  http_status: 200