Supergoop! · OAuth Scopes

Supergoop! OAuth Scopes

OAuth 2.0 probed

Supergoop! uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanySunscreenSkincareBeautyCosmeticsConsumer GoodsRetailE-CommerceDirect to ConsumerShopifyAgentic CommerceUniversal Commerce ProtocolMCPGraphQL

Scopes: 0 Flows: Method: probed

Scopes (0)

Supergoop! implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-29'
method: probed
source: https://supergoop.com/.well-known/openid-configuration
description: >-
  The only scope surface Supergoop! exposes is the scopes_supported list on its
  customer-accounts OIDC discovery document, served from supergoop.com and backed
  by the Shopify-hosted authorization server for shop 15035658. There is no
  developer-facing OAuth app registration and no published scope reference page,
  so this list is the whole of it.
authorization_server: https://shopify.com/authentication/15035658
discovery: https://supergoop.com/.well-known/openid-configuration
grant_types: [authorization_code, refresh_token, 'urn:ietf:params:oauth:grant-type:jwt-bearer']
pkce_methods: [S256]
scope_count: 4
scopes:
  - name: openid
    description: Standard OIDC scope; requests an ID token for the signed-in shopper.
    standard: true
  - name: email
    description: Releases the shopper's email and email_verified claims.
    standard: true
  - name: customer-account-api:full
    description: >-
      Full access to the Shopify Customer Account API for the signed-in shopper —
      orders, addresses, subscriptions and profile for that customer only.
    standard: false
  - name: customer-account-mcp-api:full
    description: >-
      Full access to the customer-account MCP API. This is the scope an agent
      acting for a signed-in shopper would hold; it is the credential path behind
      the get_order tool on the UCP MCP server, which returns
      AuthenticationRequired when called anonymously.
    standard: false
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]
docs: null
docs_note: >-
  Supergoop! publishes no scope reference. Scope semantics are documented by the
  platform at https://shopify.dev/docs/api/customer, which is Shopify's page, not
  Supergoop!'s — recorded here rather than cited as a provider document.

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/supergoop-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.