generated: '2026-07-17'
method: searched
source: https://www.allbirds.com/.well-known/openid-configuration
docs: https://shopify.dev/docs/api/customer
notes: >-
  OAuth 2.0 / OIDC scopes advertised by Allbirds's Shopify Customer Accounts
  authorization server (scopes_supported in the discovery documents). Descriptions
  reflect the Shopify Customer Account API and its MCP surface.
schemes:
  - name: ShopifyCustomerAccountOIDC
    source: well-known/allbirds-openid-configuration.json
    flows:
      - flow: authorizationCode
        authorizationUrl: https://accounts.allbirds.com/authentication/oauth/authorize
        tokenUrl: https://accounts.allbirds.com/authentication/oauth/token
scopes:
  - scope: openid
    description: OpenID Connect authentication; issue an ID token for the buyer.
    flows: [authorizationCode]
    sources: [well-known/allbirds-openid-configuration.json]
  - scope: email
    description: Access the buyer's email address claim.
    flows: [authorizationCode]
    sources: [well-known/allbirds-openid-configuration.json]
  - scope: customer-account-api:full
    description: Full access to the Shopify Customer Account API on behalf of the signed-in buyer.
    flows: [authorizationCode]
    sources: [well-known/allbirds-openid-configuration.json]
  - scope: customer-account-mcp-api:full
    description: Full access to the Customer Account MCP API surface for agent-driven commerce.
    flows: [authorizationCode]
    sources: [well-known/allbirds-openid-configuration.json]