generated: '2026-09-12'
method: probed
source: https://app.auth.agentsmyth.com/.well-known/openid-configuration
note: >-
  Read from the provider's live OIDC discovery document, not from an OpenAPI - no OpenAPI is
  published. These are the only scopes the authorization server advertises. They are the standard
  OIDC identity set; no resource- or product-specific scopes (no read/write, no per-agent scopes)
  are published, so an agent cannot request least-privilege access to a named capability. If
  finer-grained scopes exist they are not in the public metadata.
docs: null
docs_note: No public scopes or permissions reference page exists.
authorization_server: https://app.auth.agentsmyth.com
scope_count: 4
scopes:
- name: openid
  description: Standard OIDC scope requesting an ID token for the authenticated subject.
  category: identity
- name: profile
  description: Standard OIDC scope granting access to basic profile claims.
  category: identity
- name: email
  description: Standard OIDC scope granting access to the subject's email address claim.
  category: identity
- name: offline_access
  description: >-
    Standard OAuth scope requesting a refresh token for long-lived, unattended access - the scope an
    agent needs to keep working without a human re-authorizing.
  category: session
resource_scopes:
- resource: https://api.agentsmyth.com/mcp
  scopes_supported:
  - openid
  - offline_access
  - email
  - profile
  source: https://api.agentsmyth.com/.well-known/oauth-protected-resource/mcp
x-evidence:
  fetched: '2026-09-12'
  probes:
  - url: https://app.auth.agentsmyth.com/.well-known/openid-configuration
    http_status: 200
  - url: https://api.agentsmyth.com/.well-known/oauth-protected-resource/mcp
    http_status: 200