Vestaron · OAuth Scopes

Vestaron OAuth Scopes

OAuth 2.0 probed

Vestaron publishes 1 OAuth 2.0 scope via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Vestaron API on a user’s behalf.

Tokens are issued from https://vestaron.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyAgricultureAgTechBiotechnologyCrop ProtectionBioinsecticidesPeptidesBiologicalsSustainabilityPollinator SafetyLife SciencesContent

Scopes: 1 Flows: authorizationCode Method: probed

OAuth endpoints

Authorization URL
https://vestaron.com/oauth/authorize

Token URL
https://vestaron.com/oauth/token

Flows
authorizationCode

Scopes (1)

Scope	Description	Flows
mcp	The only scope advertised by the authorization server and by the protected-resource metadata for https://vestaron.com/wp-json/mcp/mcp-oauth-server. Vestaron publishes no further description; the scope's effective permissions could not be determined because tools/list is 401 to anonymous callers.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-05'
method: probed
source: https://vestaron.com/.well-known/oauth-authorization-server
note: >-
  Derived from the anonymous RFC 8414 authorization-server metadata and the RFC 9728
  protected-resource metadata that vestaron.com serves for its WordPress MCP endpoint. Vestaron
  publishes no scope reference page; the single scope below is the complete set the server
  advertises. Nothing beyond the advertised value is asserted.
schemes:
- name: mcp-oauth
  type: oauth2
  source: well-known/vestaron-oauth-authorization-server.json
  issuer: https://vestaron.com
  flows:
  - flow: authorizationCode
    authorizationUrl: https://vestaron.com/oauth/authorize
    tokenUrl: https://vestaron.com/oauth/token
    revocationUrl: https://vestaron.com/oauth/revoke
    pkce: required
    code_challenge_methods: [S256]
    refresh_token: true
    client_authentication: none
scopes:
- scope: mcp
  description: >-
    The only scope advertised by the authorization server and by the protected-resource metadata
    for https://vestaron.com/wp-json/mcp/mcp-oauth-server. Vestaron publishes no further
    description; the scope's effective permissions could not be determined because tools/list is
    401 to anonymous callers.
  flows: [authorizationCode]
  resources: [https://vestaron.com/wp-json/mcp/mcp-oauth-server]
  sources:
  - well-known/vestaron-oauth-authorization-server.json
  - well-known/vestaron-oauth-protected-resource.json
x-evidence:
  fetched: '2026-08-05'
  urls:
  - url: https://vestaron.com/.well-known/oauth-authorization-server
    http_status: 200
  - url: https://vestaron.com/.well-known/oauth-protected-resource
    http_status: 200