generated: '2026-08-11'
method: probed
source: https://auth.darrow.ai/.well-known/openid-configuration
docs: null
note: >-
  These are the scopes advertised by Darrow's Auth0 identity tenant, read from
  `scopes_supported` in its OpenID Connect discovery document. They are the standard
  OIDC/Auth0 profile scopes — Darrow publishes no product API and therefore no
  API-specific permission scopes. Absence of custom scopes here is a finding, not a gap
  in the probe: no public resource-server metadata or scope reference exists.
issuer: https://auth.darrow.ai/
scope_count: 14
custom_scope_count: 0
scopes:
- name: openid
  description: Request an ID token (OIDC core).
  standard: oidc
- name: profile
  description: Basic profile claims (name, family_name, given_name, nickname, picture, created_at).
  standard: oidc
- name: offline_access
  description: Issue a refresh token for long-lived access.
  standard: oidc
- name: email
  description: Email address claim.
  standard: oidc
- name: email_verified
  description: Email verification status claim.
  standard: auth0
- name: address
  description: Address claim.
  standard: oidc
- name: phone
  description: Phone number claim.
  standard: oidc
- name: name
  description: Full name claim.
  standard: auth0
- name: given_name
  description: Given name claim.
  standard: auth0
- name: family_name
  description: Family name claim.
  standard: auth0
- name: nickname
  description: Nickname claim.
  standard: auth0
- name: picture
  description: Profile picture URL claim.
  standard: auth0
- name: created_at
  description: Account creation timestamp claim.
  standard: auth0
- name: identities
  description: Linked identity provider records.
  standard: auth0
x-evidence:
  fetched: '2026-08-11'
  url: https://auth.darrow.ai/.well-known/openid-configuration
  http_status: 200