Truora · OAuth Scopes

Truora OAuth Scopes

OAuth 2.0 searched

Truora publishes 14 OAuth 2.0 scopes via the authorizationCode, ciba, and refreshToken flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Truora API on a user’s behalf.

Tokens are issued from https://api.pass.truora.com/v1/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Identity VerificationKYCBackground ChecksFraud PreventionLatAmWhatsApp

Scopes: 14 Flows: authorizationCode, ciba, refreshToken Method: searched

OAuth endpoints

Authorization URL
https://pass.truora.com/authorize

Token URL
https://api.pass.truora.com/v1/oauth2/token

Flows
authorizationCodecibarefreshToken

Scopes (14)

Scope	Description	Flows
openid	Enables OpenID Connect base functionality and the stable user identifier.	authorizationCode, ciba
email	User's email address and verification state.	authorizationCode, ciba
phone	User's phone number and verification state.	authorizationCode, ciba
profile	Basic profile — name, gender, birthdate, nationality.	authorizationCode, ciba
identity	Identity-verification status, document details, and verified name.	authorizationCode, ciba
documents	All verified documents from the user. Requires binding_message in CIBA.	authorizationCode, ciba
age	Age range, verification status, and birthdate.	authorizationCode, ciba
address	User's address information.	authorizationCode, ciba
background	Background-check outcome and trust level. Requires binding_message in CIBA.	authorizationCode, ciba
biometric	Face-enrollment status, liveness verification, and confidence metrics.	authorizationCode, ciba
verification	Overall verification status, methods used, and verification date.	authorizationCode, ciba
contact	Bundled contact info — email, phone, and communication preference.	authorizationCode, ciba
nationality	User's nationality information.	authorizationCode, ciba
document::	Granular scope filtering released documents by country and document type.	authorizationCode, ciba

📄 Provider scope reference: https://dev.truora.com/truora-pass/scopes_reference/

Source

OAuth Scopes

generated: '2026-07-17'
method: searched
source: https://dev.truora.com/truora-pass/scopes_reference/
docs: https://dev.truora.com/truora-pass/scopes_reference/
notes: >-
  OAuth scopes apply to Truora Pass — Truora's OAuth 2.0 / OpenID Connect Identity
  Provider (developer/dev.truora.com/truora-pass/). Truora Pass lets applications
  authenticate a user and consume that user's verified-identity data (document,
  biometric, background, contact claims) via standard OIDC. This is distinct from
  the core Checks/Validators/Digital-Identity/Account REST APIs, which authenticate
  with the Truora-API-Key header and have no OAuth scope surface. The Authorization
  Code, Embedded SDK (web_message), and CIBA (decoupled) flows all request these
  scopes; the `documents` and `background` scopes require a `binding_message`
  parameter in CIBA requests.
schemes:
  - name: TruoraPassOAuth2
    type: oauth2
    source: https://dev.truora.com/truora-pass/getting_started/
    flows:
      - flow: authorizationCode
        authorizationUrl: https://pass.truora.com/authorize
        tokenUrl: https://api.pass.truora.com/v1/oauth2/token
        userinfoUrl: https://api.pass.truora.com/v1/oauth2/userinfo
      - flow: ciba
        deviceAuthorizationUrl: https://api.pass.truora.com/v1/oauth2/bc-authorize
        tokenUrl: https://api.pass.truora.com/v1/oauth2/token
      - flow: refreshToken
        tokenUrl: https://api.pass.truora.com/v1/oauth2/token
scopes:
  - scope: openid
    description: Enables OpenID Connect base functionality and the stable user identifier.
    flows: [authorizationCode, ciba]
  - scope: email
    description: User's email address and verification state.
    flows: [authorizationCode, ciba]
  - scope: phone
    description: User's phone number and verification state.
    flows: [authorizationCode, ciba]
  - scope: profile
    description: Basic profile — name, gender, birthdate, nationality.
    flows: [authorizationCode, ciba]
  - scope: identity
    description: Identity-verification status, document details, and verified name.
    flows: [authorizationCode, ciba]
  - scope: documents
    description: All verified documents from the user. Requires binding_message in CIBA.
    flows: [authorizationCode, ciba]
  - scope: age
    description: Age range, verification status, and birthdate.
    flows: [authorizationCode, ciba]
  - scope: address
    description: User's address information.
    flows: [authorizationCode, ciba]
  - scope: background
    description: Background-check outcome and trust level. Requires binding_message in CIBA.
    flows: [authorizationCode, ciba]
  - scope: biometric
    description: Face-enrollment status, liveness verification, and confidence metrics.
    flows: [authorizationCode, ciba]
  - scope: verification
    description: Overall verification status, methods used, and verification date.
    flows: [authorizationCode, ciba]
  - scope: contact
    description: Bundled contact info — email, phone, and communication preference.
    flows: [authorizationCode, ciba]
  - scope: nationality
    description: User's nationality information.
    flows: [authorizationCode, ciba]
  - scope: "document:<COUNTRY>:<TYPE>"
    description: Granular scope filtering released documents by country and document type.
    flows: [authorizationCode, ciba]