Voyage Foods · OAuth Scopes

Voyage Foods OAuth Scopes

OAuth 2.0 searched

Voyage Foods publishes 4 OAuth 2.0 scopes via the authorizationCode, refreshToken, and urn:ietf:params:oauth:grant-type:jwt-bearer flows. Scopes are the fine-grained permissions an application requests at authorization time to act against the Voyage Foods API on a user’s behalf.

Tokens are issued from https://shopify.com/authentication/59465728192/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyFood and BeverageConsumer Packaged GoodsEcommerceAgentic CommerceUniversal Commerce ProtocolMCPGraphQLShopifyFood Technology

Scopes: 4 Flows: authorizationCode, refreshToken, urn:ietf:params:oauth:grant-type:jwt-bearer Method: searched

OAuth endpoints

Authorization URL
https://shopify.com/authentication/59465728192/oauth/authorize

Token URL
https://shopify.com/authentication/59465728192/oauth/token

Flows
authorizationCoderefreshTokenurn:ietf:params:oauth:grant-type:jwt-bearer

Scopes (4)

Scope	Description	Flows
openid	Standard OpenID Connect scope; requests an ID token identifying the signed-in customer.	authorizationCode
email	Releases the customer's email address and email_verified claim in the ID token.	authorizationCode
customer-account-api:full	Full access to the Shopify Customer Account API on behalf of the signed-in customer — orders, addresses, profile and subscription data for this shop.	authorizationCode
customer-account-mcp-api:full	Full access to the Customer Account MCP API — the authenticated, customer-scoped MCP surface, distinct from the anonymous UCP shopping MCP endpoint at /api/ucp/mcp.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-05'
method: searched
source: https://voyagefoods.com/.well-known/openid-configuration
note: >-
  Scopes are not derived from an OpenAPI (Voyage Foods publishes none). They are read verbatim from
  the scopes_supported array of the OIDC discovery / RFC 8414 authorization-server metadata document
  the storefront serves at voyagefoods.com/.well-known/. Descriptions below state what each scope
  gates on the Shopify Customer Accounts issuer that backs this storefront; the storefront itself
  publishes no scope reference page.
schemes:
- name: ShopifyCustomerAccountsOIDC
  issuer: https://shopify.com/authentication/59465728192
  source: well-known/voyage-foods-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/59465728192/oauth/authorize
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
    pkce: S256
  - flow: refreshToken
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
  - flow: 'urn:ietf:params:oauth:grant-type:jwt-bearer'
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
scopes:
- scope: openid
  description: Standard OpenID Connect scope; requests an ID token identifying the signed-in customer.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: email
  description: Releases the customer's email address and email_verified claim in the ID token.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: 'customer-account-api:full'
  description: >-
    Full access to the Shopify Customer Account API on behalf of the signed-in customer — orders,
    addresses, profile and subscription data for this shop.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: 'customer-account-mcp-api:full'
  description: >-
    Full access to the Customer Account MCP API — the authenticated, customer-scoped MCP surface,
    distinct from the anonymous UCP shopping MCP endpoint at /api/ucp/mcp.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
not_scope_gated:
- surface: https://voyagefoods.com/api/2026-04/graphql.json
  reason: Public storefront reads are anonymous; no OAuth scope is presented.
- surface: https://voyagefoods.com/api/ucp/mcp
  reason: >-
    UCP tool access is gated on an agent profile URI (meta.ucp-agent.profile), not on OAuth scopes.
x-evidence:
  fetched: '2026-08-05'
  url: https://voyagefoods.com/.well-known/openid-configuration
  http_status: 200
  content_type: application/json; charset=utf-8
  scopes_supported_returned: 4