University of Lisbon OAuth Scopes

OAuth 2.0 probed

University of Lisbon uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

UniversityHigher EducationEducationPortugalEuropePublic Research UniversityCourse CatalogResearch RepositoryLibraryIdentity FederationOAI-PMHOpen AccessErasmus Without PaperMetadata

Scopes: 0 Flows: Method: probed

Scopes (0)

University of Lisbon implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

Written by API Evangelist. This file records an ABSENCE that was measured, not a scope list. No scope names are invented here.

📄 Provider scope reference:

Source

OAuth Scopes

---
name: University of Lisbon — Access Scopes
generated: '2026-09-01'
method: probed
source:
  - https://fenix.tecnico.ulisboa.pt/oauth/userdialog
  - https://fenixedu.org/dev/api/
note: >-
  Written by API Evangelist. This file records an ABSENCE that was measured, not a
  scope list. No scope names are invented here.
published_scopes: none
finding: >-
  The FenixEdu deployment at Instituto Superior Tecnico runs Bennu OAuth 2.0 with a
  working authorization and token endpoint, but it publishes no scope vocabulary. The
  consent dialog at /oauth/userdialog renders per registered application, the human
  documentation at fenixedu.org/dev/api/ names no scope strings, and there is no
  discovery document — probed 2026-09-01, no /.well-known/oauth-authorization-server
  and no /.well-known/openid-configuration under the API host. Consequently
  components.securitySchemes.fenixOAuth.flows.authorizationCode.scopes in
  openapi/university-of-lisbon-fenixedu-academic-api-openapi.yml is deliberately an
  empty object rather than a guessed list.
access_boundaries_observed:
  - boundary: anonymous
    description: >-
      Institutional metadata, academic terms, contacts, degree and course catalog,
      campus spaces and blueprints, parking, canteen, shuttle, serialized domain model.
    evidence: 9 endpoints probed 2026-09-01, all 200 with no Authorization header.
  - boundary: person-scoped, token required
    description: >-
      Personal profile, course enrolments, curriculum, class and evaluation calendars,
      evaluation enrolment, tuition and payment records.
    evidence:
      url: https://fenix.tecnico.ulisboa.pt/api/fenix/v1/person
      status: 401
      body: '{"error":"accessTokenInvalidFormat","error_description":"Access Token not recognized."}'

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/university-of-lisbon-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.