SecureAuth (incl. Cloudentity) · OAuth Scopes

SecureAuth (incl. Cloudentity) OAuth Scopes

OAuth 2.0 derived

SecureAuth (incl. Cloudentity) publishes 44 OAuth 2.0 scopes via the authorizationCode and clientCredentials flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the SecureAuth (incl. Cloudentity) API on a user’s behalf.

Tokens are issued from /default/admin/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyIdentityAuthenticationAuthorizationOAuthOpen Banking

Scopes: 44 Flows: authorizationCode, clientCredentials Method: derived

OAuth endpoints

Authorization URL
/default/admin/oauth2/authorize /default/default/oauth2/authorize /default/system/oauth2/authorize /default/developer/oauth2/authorize /system/system/oauth2/authorize /system/admin/oauth2/authorize

Token URL
/default/admin/oauth2/token /default/default/oauth2/token /default/system/oauth2/token /default/developer/oauth2/token /system/system/oauth2/token /system/admin/oauth2/token

Flows
authorizationCodeclientCredentials

Scopes (44)

Scope	Description	Flows
accounts	accounts	authorizationCode
admin:metadata:update
client_register
consents	consents	authorizationCode
dcr_register	dcr_register	authorizationCode
gateway_exchange_tokens
identity	identity	authorizationCode
identity_self_registration	identity_self_registration	authorizationCode
introspect_openbanking_tokens	introspect_openbanking_tokens	authorizationCode
introspect_tokens	introspect_tokens	authorizationCode
list_clients_with_access	list_clients_with_access	authorizationCode
manage_clients	manage_clients	authorizationCode
manage_configuration	manage_configuration	authorizationCode
manage_consents	manage_consents	authorizationCode
manage_idps	manage_idps	authorizationCode
manage_logins	manage_logins	authorizationCode
manage_openbanking_consents	manage_openbanking_consents	authorizationCode
manage_post_authn	manage_post_authn	authorizationCode
manage_scope_grants	manage_scope_grants	authorizationCode
manage_scripts
manage_secrets
manage_servers
manage_sessions	manage_sessions	authorizationCode
manage_ss_profile	manage_ss_profile	authorizationCode
manage_tokens
payments	payments	authorizationCode
push_audit_events	push_audit_events	authorizationCode
push_gateway_requests	push_gateway_requests	authorizationCode
read_configuration	read_configuration	authorizationCode
read_gateway_configuration	read_gateway_configuration	authorizationCode
read_secrets
recurringPayments
revoke_client_access	revoke_client_access	authorizationCode
revoke_tokens	revoke_tokens	authorizationCode
scim_v2	scim_v2	authorizationCode
transient_otp	transient_otp	authorizationCode
update_client_status
view_audit_events	view_audit_events	authorizationCode
view_clients	view_clients	authorizationCode
view_consents	view_consents	authorizationCode
view_scopes
view_sessions	view_sessions	authorizationCode
view_ss_profile	view_ss_profile	authorizationCode
write_gateway_configuration	write_gateway_configuration	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-10-13'
method: derived
source: openapi/secureauth-admin-openapi.yml, openapi/secureauth-analytics-openapi.yml, openapi/secureauth-cdr-openapi.yml,
  openapi/secureauth-developer-openapi.yml, openapi/secureauth-fdx-openapi.yml, openapi/secureauth-hub-openapi.yml,
  openapi/secureauth-identity-openapi.yml, openapi/secureauth-identityroot-openapi.yml, openapi/secureauth-identityself-openapi.yml,
  openapi/secureauth-identitysystem-openapi.yml, openapi/secureauth-ksa-openapi.yml, openapi/secureauth-licensingadmin-openapi.yml,
  openapi/secureauth-licensingroot-openapi.yml, openapi/secureauth-oauth2-openapi.yml, openapi/secureauth-obbr-openapi.yml,
  openapi/secureauth-obuk-openapi.yml, openapi/secureauth-opin-openapi.yml, openapi/secureauth-permissions-openapi.yml,
  openapi/secureauth-public-openapi.yml, openapi/secureauth-root-openapi.yml, openapi/secureauth-system-openapi.yml
schemes:
- name: admin
  source: openapi/secureauth-admin-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/admin/oauth2/authorize
    tokenUrl: /default/admin/oauth2/token
- name: admin
  source: openapi/secureauth-analytics-openapi.yml
  flows:
  - flow: clientCredentials
    authorizationUrl: /default/admin/oauth2/authorize
    tokenUrl: /default/admin/oauth2/token
- name: default
  source: openapi/secureauth-cdr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-cdr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-cdr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: developer
  source: openapi/secureauth-developer-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/developer/oauth2/authorize
    tokenUrl: /default/developer/oauth2/token
- name: default
  source: openapi/secureauth-fdx-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-fdx-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-fdx-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: setup
  source: openapi/secureauth-hub-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/system/oauth2/authorize
    tokenUrl: /system/system/oauth2/token
- name: system
  source: openapi/secureauth-hub-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: admin
  source: openapi/secureauth-identity-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/admin/oauth2/authorize
    tokenUrl: /default/admin/oauth2/token
- name: adminSystem
  source: openapi/secureauth-identityroot-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/admin/oauth2/authorize
    tokenUrl: /system/admin/oauth2/token
- name: setup
  source: openapi/secureauth-identityroot-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/system/oauth2/authorize
    tokenUrl: /system/system/oauth2/token
- name: self
  source: openapi/secureauth-identityself-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-identitysystem-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: default
  source: openapi/secureauth-ksa-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-ksa-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-ksa-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: admin
  source: openapi/secureauth-licensingadmin-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/admin/oauth2/authorize
    tokenUrl: /default/admin/oauth2/token
- name: adminSystem
  source: openapi/secureauth-licensingroot-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/admin/oauth2/authorize
    tokenUrl: /system/admin/oauth2/token
- name: setup
  source: openapi/secureauth-licensingroot-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/system/oauth2/authorize
    tokenUrl: /system/system/oauth2/token
- name: default
  source: openapi/secureauth-oauth2-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: default
  source: openapi/secureauth-obbr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-obbr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-obbr-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: default
  source: openapi/secureauth-obuk-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-obuk-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-obuk-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: default
  source: openapi/secureauth-opin-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: defaultcc
  source: openapi/secureauth-opin-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: system
  source: openapi/secureauth-opin-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
- name: admin
  source: openapi/secureauth-permissions-openapi.yml
  flows:
  - flow: clientCredentials
    authorizationUrl: /default/admin/oauth2/authorize
    tokenUrl: /default/admin/oauth2/token
- name: default
  source: openapi/secureauth-public-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/default/oauth2/authorize
    tokenUrl: /default/default/oauth2/token
- name: adminSystem
  source: openapi/secureauth-root-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/admin/oauth2/authorize
    tokenUrl: /system/admin/oauth2/token
- name: setup
  source: openapi/secureauth-root-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /system/system/oauth2/authorize
    tokenUrl: /system/system/oauth2/token
- name: system
  source: openapi/secureauth-system-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: /default/system/oauth2/authorize
    tokenUrl: /default/system/oauth2/token
scopes:
- scope: accounts
  description: accounts
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: admin:metadata:update
  sources:
  - openapi/secureauth-cdr-openapi.yml
- scope: client_register
  sources:
  - openapi/secureauth-fdx-openapi.yml
- scope: consents
  description: consents
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: dcr_register
  description: dcr_register
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: gateway_exchange_tokens
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: identity
  description: identity
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identitysystem-openapi.yml
- scope: identity_self_registration
  description: identity_self_registration
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identitysystem-openapi.yml
- scope: introspect_openbanking_tokens
  description: introspect_openbanking_tokens
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: introspect_tokens
  description: introspect_tokens
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: list_clients_with_access
  description: list_clients_with_access
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-public-openapi.yml
- scope: manage_clients
  description: manage_clients
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_configuration
  description: manage_configuration
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-hub-openapi.yml
  - openapi/secureauth-identityroot-openapi.yml
  - openapi/secureauth-identitysystem-openapi.yml
  - openapi/secureauth-licensingroot-openapi.yml
  - openapi/secureauth-root-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: manage_consents
  description: manage_consents
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-public-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: manage_idps
  description: manage_idps
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_logins
  description: manage_logins
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_openbanking_consents
  description: manage_openbanking_consents
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: manage_post_authn
  description: manage_post_authn
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-public-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: manage_scope_grants
  description: manage_scope_grants
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_scripts
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_secrets
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_servers
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: manage_sessions
  description: manage_sessions
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-public-openapi.yml
- scope: manage_ss_profile
  description: manage_ss_profile
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identityself-openapi.yml
- scope: manage_tokens
  sources:
  - openapi/secureauth-public-openapi.yml
- scope: payments
  description: payments
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-cdr-openapi.yml
  - openapi/secureauth-fdx-openapi.yml
  - openapi/secureauth-ksa-openapi.yml
  - openapi/secureauth-obbr-openapi.yml
  - openapi/secureauth-obuk-openapi.yml
  - openapi/secureauth-opin-openapi.yml
- scope: push_audit_events
  description: push_audit_events
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-root-openapi.yml
- scope: push_gateway_requests
  description: push_gateway_requests
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: read_configuration
  description: read_configuration
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identitysystem-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: read_gateway_configuration
  description: read_gateway_configuration
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: read_secrets
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: recurringPayments
  sources:
  - openapi/secureauth-obbr-openapi.yml
- scope: revoke_client_access
  description: revoke_client_access
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-public-openapi.yml
- scope: revoke_tokens
  description: revoke_tokens
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: scim_v2
  description: scim_v2
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identitysystem-openapi.yml
- scope: transient_otp
  description: transient_otp
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-public-openapi.yml
- scope: update_client_status
  sources:
  - openapi/secureauth-fdx-openapi.yml
- scope: view_audit_events
  description: view_audit_events
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: view_clients
  description: view_clients
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: view_consents
  description: view_consents
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-oauth2-openapi.yml
  - openapi/secureauth-public-openapi.yml
  - openapi/secureauth-system-openapi.yml
- scope: view_scopes
  sources:
  - openapi/secureauth-system-openapi.yml
- scope: view_sessions
  description: view_sessions
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-public-openapi.yml
- scope: view_ss_profile
  description: view_ss_profile
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-identityself-openapi.yml
- scope: write_gateway_configuration
  description: write_gateway_configuration
  flows:
  - authorizationCode
  sources:
  - openapi/secureauth-system-openapi.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/secureauth-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.