The Fit Body Co · Authentication Profile

The Fit Body Co Authentication

Authentication

The Fit Body Co (fitbody.mx) is a Shopify-hosted storefront and publishes no first-party developer API. The only authentication surface exposed on the host is Shopify's Customer Account API, whose OpenID Connect discovery document is served at /.well-known/openid-configuration (and /.well-known/oauth-authorization-server) with issuer https://shopify.com/authentication/24443367. This profile captures that OIDC/OAuth 2.0 surface verbatim from the live discovery document; it is a Shopify platform capability scoped to this shop, not a bespoke Fit Body Co API.

The Fit Body Co secures its APIs with openIdConnect and oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions.

CompanySports NutritionDietary SupplementsE-CommerceHealth and WellnessConsumer ProductsMexicoShopify
Methods: openIdConnect, oauth2 Schemes: 1 OAuth flows: API key in:

Security Schemes

shopifyCustomerAccountOIDC openIdConnect

Source

Authentication Profile

the-fit-body-co-authentication.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://fitbody.mx/.well-known/openid-configuration
docs: https://shopify.dev/docs/api/customer
description: >-
  The Fit Body Co (fitbody.mx) is a Shopify-hosted storefront and publishes no
  first-party developer API. The only authentication surface exposed on the host
  is Shopify's Customer Account API, whose OpenID Connect discovery document is
  served at /.well-known/openid-configuration (and /.well-known/oauth-authorization-server)
  with issuer https://shopify.com/authentication/24443367. This profile captures
  that OIDC/OAuth 2.0 surface verbatim from the live discovery document; it is a
  Shopify platform capability scoped to this shop, not a bespoke Fit Body Co API.
summary:
  types:
  - openIdConnect
  - oauth2
schemes:
- name: shopifyCustomerAccountOIDC
  type: openIdConnect
  openIdConnectUrl: https://fitbody.mx/.well-known/openid-configuration
  issuer: https://shopify.com/authentication/24443367
  authorizationUrl: https://shopify.com/authentication/24443367/oauth/authorize
  tokenUrl: https://shopify.com/authentication/24443367/oauth/token
  jwksUri: https://shopify.com/authentication/24443367/.well-known/jwks.json
  endSessionEndpoint: https://shopify.com/authentication/24443367/logout
  grant_types:
  - authorization_code
  - refresh_token
  - urn:ietf:params:oauth:grant-type:jwt-bearer
  response_types:
  - code
  code_challenge_methods:
  - S256
  id_token_signing_alg:
  - RS256
  token_endpoint_auth_methods:
  - client_secret_basic
  scopes:
  - openid
  - email
  - customer-account-api:full
  - customer-account-mcp-api:full
  source: https://fitbody.mx/.well-known/openid-configuration

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/the-fit-body-co-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.