Trulioo · OAuth Scopes

Trulioo OAuth Scopes

OAuth 2.0 searched

Trulioo publishes 12 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Trulioo API on a user’s behalf.

Tokens are issued from https://auth-api.trulioo.com/connect/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Identity VerificationKYCKYBAMLWatchlist ScreeningBiometricsDocument VerificationFraud PreventionComplianceGlobal Identity

Scopes: 12 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://auth-api.trulioo.com/connect/token https://api.trulioo.com/customer/v2/auth/customer

Flows
clientCredentials

Scopes (12)

Scope	Description	Flows
napi.api	Grants access to the Normalized API (NAPI v3 / GlobalGateway KYC verifications). Set as the scope value alongside grant_type=client_credentials when requesting a bearer token from https://auth-api.trulioo.com/connect/token.
workflow.studio.api	Grants access to the Workflow Studio (Platform) API. Set as the scope value with grant_type=client_credentials in the client-credentials token request.
docv.api.us	Authorizes Identity Document Verification (DocV) operations in the US region. Trulioo's DocV scope parameter specifies both the region and the service the token may access.
read	MCP: fetch records, statuses and reports (granted by default; request read alone for an analysis-only integration)
verify	MCP: run verifications and issue KYA credentials (granted by default)
verification:create	MCP (protected-resource metadata for /mcp)
kyb:submit	MCP (protected-resource metadata for /mcp)
agent:write	MCP KYA: register, supersede and retire Digital Agent Profiles
domain:write	MCP KYA: agent domain challenge and verification
release:publish	MCP KYA: register and publish Agentic Releases
release:revoke	MCP KYA: permanently revoke an Agentic Release
sandbox:write	MCP: seed and reset sandbox scenarios

📄 Provider scope reference: https://developer.trulioo.com/reference/authentication

Source

OAuth Scopes

generated: '2026-10-08'
method: searched
docs: https://developer.trulioo.com/reference/authentication
source:
- openapi/trulioo-business-verification-api-openapi.yml, openapi/trulioo-configuration-api-openapi.yml, openapi/trulioo-connection-api-openapi.yml,
  openapi/trulioo-document-verification-api-openapi.yml, openapi/trulioo-person-fraud-api-openapi.yml, openapi/trulioo-platform-api-openapi.yml,
  openapi/trulioo-verifications-api-openapi.yml
- https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp
- https://mcp.trulioo.com/.well-known/oauth-authorization-server
- https://mcp.trulioo.com/developer/index.md
schemes:
- name: OAuth2
  source: openapi/trulioo-business-verification-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
- name: OAuth2
  source: openapi/trulioo-configuration-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
- name: OAuth2
  source: openapi/trulioo-connection-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
- name: OAuth2
  source: openapi/trulioo-document-verification-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
- name: OAuth2
  source: openapi/trulioo-person-fraud-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
- name: OAuth2
  source: openapi/trulioo-platform-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.trulioo.com/customer/v2/auth/customer
- name: OAuth2
  source: openapi/trulioo-verifications-api-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://auth-api.trulioo.com/connect/token
  description: Two-legged client credentials OAuth2 flow.
scopes:
- scope: napi.api
  description: Grants access to the Normalized API (NAPI v3 / GlobalGateway KYC verifications). Set as the scope
    value alongside grant_type=client_credentials when requesting a bearer token from https://auth-api.trulioo.com/connect/token.
  sources:
  - https://developer.trulioo.com/reference/authentication
  - https://developer.trulioo.com/reference/authentication-recipe
- scope: workflow.studio.api
  description: Grants access to the Workflow Studio (Platform) API. Set as the scope value with grant_type=client_credentials
    in the client-credentials token request.
  sources:
  - https://developer.trulioo.com/reference/authentication-recipe
- scope: docv.api.us
  description: Authorizes Identity Document Verification (DocV) operations in the US region. Trulioo's DocV scope
    parameter specifies both the region and the service the token may access.
  sources:
  - https://developer.trulioo.com/reference/authorization-2
- scope: read
  description: 'MCP: fetch records, statuses and reports (granted by default; request read alone for an analysis-only
    integration)'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: verify
  description: 'MCP: run verifications and issue KYA credentials (granted by default)'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: verification:create
  description: MCP (protected-resource metadata for /mcp)
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: kyb:submit
  description: MCP (protected-resource metadata for /mcp)
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: agent:write
  description: 'MCP KYA: register, supersede and retire Digital Agent Profiles'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: domain:write
  description: 'MCP KYA: agent domain challenge and verification'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: release:publish
  description: 'MCP KYA: register and publish Agentic Releases'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: release:revoke
  description: 'MCP KYA: permanently revoke an Agentic Release'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
- scope: sandbox:write
  description: 'MCP: seed and reset sandbox scenarios'
  surface: https://mcp.trulioo.com/mcp
  sources:
  - https://mcp.trulioo.com/.well-known/oauth-protected-resource/mcp (scopes_supported, probed 2026-10-08)
  - https://mcp.trulioo.com/developer/index.md (Scopes)
note: Trulioo uses the OAuth2 client_credentials flow with service- and region-scoped values (for example docv.api.us
  for DocV in the US region); only the scopes above are documented publicly, and no full scope catalog is published
  (https://developer.trulioo.com/reference/authorization-2).
mcp_docs: https://mcp.trulioo.com/developer/#auth

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/trulioo-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.