True & Co · OAuth Scopes

True & Co OAuth Scopes

OAuth 2.0 searched

True & Co uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyConsumerRetailE-CommerceApparelIntimatesAgentic CommerceShopifyMCP

Scopes: 0 Flows: Method: searched

Scopes (0)

True & Co implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

📄 Provider scope reference: https://shopify.dev/docs/api/customer

Source

OAuth Scopes

generated: 2026-07-21
method: searched
source: >-
  https://trueandco.com/.well-known/openid-configuration (scopes_supported),
  fetched live 2026-07-21
provider: Shopify Customer Account (OAuth 2.0 / OIDC)
issuer: https://shopify.com/authentication/86218834196
docs: https://shopify.dev/docs/api/customer
flows:
- authorization_code (PKCE, S256)
- refresh_token
- urn:ietf:params:oauth:grant-type:jwt-bearer
scopes:
- name: openid
  description: OpenID Connect authentication; issues an ID token for the customer.
- name: email
  description: Access to the customer's verified email address claim.
- name: customer-account-api:full
  description: Full access to the Shopify Customer Account API on behalf of the signed-in buyer.
- name: customer-account-mcp-api:full
  description: Full access to the Customer Account MCP API for agent-driven access to the buyer's account.