Swan · OAuth Scopes

Swan OAuth Scopes

OAuth 2.0 searched

Swan publishes 5 OAuth 2.0 scopes via the authorizationCode, clientCredentials, and refreshToken flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Swan API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyBanking as a ServiceEmbedded FinanceFintechPaymentsCardsSEPAGraphQLEuropeAccounts

Scopes: 5 Flows: authorizationCode, clientCredentials, refreshToken Method: searched

Scopes (5)

Scope	Description	Flows
openid	OpenID Connect authentication; returns an ID token identifying the user.	authorizationCode
profile	Access to the user's basic profile claims.	authorizationCode
email	Access to the user's email address.	authorizationCode
offline_access	Issue a refresh token so the client can obtain new access tokens without re-consent.	authorizationCode
offline	Legacy alias for offline refresh-token access.	authorizationCode

📄 Provider scope reference: https://docs.swan.io/developers/using-api/authentication

Source

OAuth Scopes

generated: '2026-07-21'
method: searched
source: https://oauth.swan.io/.well-known/openid-configuration
docs: https://docs.swan.io/developers/using-api/authentication
schemes:
- name: OAuth2
  authorizationUrl: https://oauth.swan.io/oauth2/auth
  tokenUrl: https://oauth.swan.io/oauth2/token
  flows: [authorizationCode, clientCredentials, refreshToken]
scopes:
- scope: openid
  description: OpenID Connect authentication; returns an ID token identifying the user.
  flows: [authorizationCode]
- scope: profile
  description: Access to the user's basic profile claims.
  flows: [authorizationCode]
- scope: email
  description: Access to the user's email address.
  flows: [authorizationCode]
- scope: offline_access
  description: Issue a refresh token so the client can obtain new access tokens without re-consent.
  flows: [authorizationCode]
- scope: offline
  description: Legacy alias for offline refresh-token access.
  flows: [authorizationCode]
notes: >-
  Scopes are the OpenID Connect scopes advertised by Swan's authorization server
  discovery document (scopes_supported). Project access tokens obtained via the
  client_credentials grant are issued with project-level access and an empty
  scope string; fine-grained authorization for those tokens is governed by the
  project's configured permissions and by consent granted through user tokens,
  not by OAuth scope values. Sensitive mutations require a user access token (or
  a project token impersonating a user) plus explicit user consent.