Zefr · OAuth Scopes

Zefr OAuth Scopes

OAuth 2.0 probed

Zefr uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyAdtechBrand SafetyBrand SuitabilityContent IntelligenceContent ModerationVideoSocial MediaAdvertisingMedia MeasurementMachine Learning

Scopes: 0 Flows: Method: probed

Scopes (0)

Zefr implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

These are the scopes Zefr's own identity provider (Auth0 custom domain login.zefr.com) advertises in its OpenID Connect discovery document, read verbatim. They are the standard OIDC identity-layer scopes — Zefr publishes NO product/API scope reference, and no audience-scoped permissions for any Zefr API. Recorded because they are genuinely published and machine-readable, not because they describe a product authorization model.

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-08-12'
method: probed
source: https://login.zefr.com/.well-known/openid-configuration
note: >-
  These are the scopes Zefr's own identity provider (Auth0 custom domain login.zefr.com)
  advertises in its OpenID Connect discovery document, read verbatim. They are the standard
  OIDC identity-layer scopes — Zefr publishes NO product/API scope reference, and no
  audience-scoped permissions for any Zefr API. Recorded because they are genuinely published
  and machine-readable, not because they describe a product authorization model.
issuer: https://login.zefr.com/
docs: null
docs_note: No scopes or permissions reference page is published anywhere on zefr.com.
scope_count: 14
scopes:
- name: openid
  description: Required for OpenID Connect; returns an ID token.
  layer: identity
- name: profile
  description: Basic profile claims (name, given_name, family_name, nickname, picture, created_at).
  layer: identity
- name: offline_access
  description: Issues a refresh token for long-lived access.
  layer: identity
- name: name
  description: The end user's full name claim.
  layer: identity
- name: given_name
  description: The end user's given name claim.
  layer: identity
- name: family_name
  description: The end user's family name claim.
  layer: identity
- name: nickname
  description: The end user's nickname claim.
  layer: identity
- name: email
  description: The end user's email address claim.
  layer: identity
- name: email_verified
  description: Whether the end user's email address has been verified.
  layer: identity
- name: picture
  description: URL of the end user's profile picture.
  layer: identity
- name: created_at
  description: Account creation timestamp claim.
  layer: identity
- name: identities
  description: Linked identity-provider connections for the account (Auth0 extension).
  layer: identity
- name: phone
  description: The end user's phone number claim.
  layer: identity
- name: address
  description: The end user's address claim.
  layer: identity
product_scopes:
  published: false
  note: >-
    No Zefr product API scopes (brand suitability, measurement, reporting, classification)
    are published. A machine-to-machine client would need an audience and scopes issued
    privately by Zefr; neither is documented.