generated: '2026-08-02'
method: derived
source: well-known/aptera-motors-shop-openid-configuration.json
note: >-
  Aptera Motors publishes no OpenAPI with oauth2 securitySchemes and no scopes
  reference page. These scopes are the scopes_supported list advertised by the
  Shopify customer-account authorization server backing https://shop.aptera.us.
  Descriptions are the standard meanings of these OIDC/Shopify scopes; no scope
  descriptions are published by the provider.
docs: null
schemes:
- name: shopify-customer-account-oidc
  source: well-known/aptera-motors-shop-openid-configuration.json
  issuer: https://shopify.com/authentication/85136474359
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/85136474359/oauth/authorize
    tokenUrl: https://shopify.com/authentication/85136474359/oauth/token
    pkce: S256
scopes:
- scope: openid
  description: Standard OpenID Connect scope requesting an ID token for the authenticated
    customer.
  flows: [authorizationCode]
  sources: [well-known/aptera-motors-shop-openid-configuration.json]
- scope: email
  description: Releases the customer's email and email_verified claims.
  flows: [authorizationCode]
  sources: [well-known/aptera-motors-shop-openid-configuration.json]
- scope: customer-account-api:full
  description: Full access to the Shopify Customer Account API for the signed-in
    customer of this store.
  flows: [authorizationCode]
  sources: [well-known/aptera-motors-shop-openid-configuration.json]
- scope: customer-account-mcp-api:full
  description: Full access to the Shopify Customer Account MCP API for the signed-in
    customer — the authenticated counterpart of the anonymous storefront MCP server.
  flows: [authorizationCode]
  sources: [well-known/aptera-motors-shop-openid-configuration.json]
x-evidence:
  fetched: '2026-08-02'
  http_status: 200
  url: https://shop.aptera.us/.well-known/openid-configuration