generated: '2026-08-07'
method: probed
source: https://bespokenspirits.com/.well-known/openid-configuration
notes: >-
  These are the OAuth 2.0 / OIDC scopes advertised by the Shopify Customer Account
  authorization server bound to the bespokenspirits.com storefront. They are read
  verbatim from scopes_supported in the store's own /.well-known/openid-configuration
  and /.well-known/oauth-authorization-server documents. Bespoken Spirits publishes no
  scope reference page of its own; the descriptions below are the standard meanings of
  the scope names, not provider-authored copy.
schemes:
- name: shopify-customer-account-oidc
  source: well-known/bespoken-spirits-openid-configuration.json
  issuer: https://shopify.com/authentication/75681399024
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/75681399024/oauth/authorize
    tokenUrl: https://shopify.com/authentication/75681399024/oauth/token
    pkce: S256
scopes:
- scope: openid
  description: Standard OIDC scope requesting an ID token for the authenticated buyer.
  flows:
  - authorizationCode
  sources:
  - well-known/bespoken-spirits-openid-configuration.json
- scope: email
  description: Release the buyer's email address and email_verified claim.
  flows:
  - authorizationCode
  sources:
  - well-known/bespoken-spirits-openid-configuration.json
- scope: customer-account-api:full
  description: Full access to the Shopify Customer Account API on behalf of the
    authenticated buyer — orders, addresses, profile and subscriptions for this store.
  flows:
  - authorizationCode
  sources:
  - well-known/bespoken-spirits-openid-configuration.json
- scope: customer-account-mcp-api:full
  description: Full access to the Shopify Customer Account MCP API — the authenticated,
    buyer-scoped counterpart to the anonymous storefront MCP endpoints catalogued in
    mcp/bespoken-spirits-mcp.yml.
  flows:
  - authorizationCode
  sources:
  - well-known/bespoken-spirits-openid-configuration.json
x-evidence:
  fetched: '2026-08-07'
  probes:
  - url: https://bespokenspirits.com/.well-known/openid-configuration
    http_status: 200
  - url: https://bespokenspirits.com/.well-known/oauth-authorization-server
    http_status: 200