aid: eon-next
url: https://raw.githubusercontent.com/api-evangelist/eon-next/refs/heads/main/apis.yml
name: E.ON Next
kind: company
description: >-
  E.ON Next Energy Limited is the United Kingdom retail supply arm of the
  E.ON Group, formed after E.ON's 2019 acquisition of npower and serving roughly five
  million British households and small businesses with electricity, gas, smart meters,
  solar, home batteries, heat pumps and EV charging tariffs. It sits at the retail
  end of the GB energy value chain — buying wholesale, settling through Elexon, reading
  SMETS2 smart meters over the licensed Smart DCC network, and billing the customer
  — and it runs its entire operation on Kraken, the API-first, GraphQL-based energy
  operating system licensed from Kraken Technologies (Octopus Energy Group), onto which
  5.8 million customers were migrated between June 2020 and June 2022. Its API posture
  is the exact opposite of its platform's reputation: the Kraken architecture underneath
  is API-first, but almost nothing is published outward. There is no developer portal,
  no API documentation, no OpenAPI, and no third-party route to a customer's usage or
  billing data; developer.eonnext.com and docs.eonnext.com do not resolve, and both
  api.eonnext.com and data.eonnext.com answer every path with an unauthenticated AWS API
  Gateway 403 "Missing Authentication Token". The one machine-readable contract E.ON Next
  does publish is its customer identity layer — auth.eonnext.com, an Auth0 CIAM tenant,
  serves a complete anonymous OpenID Connect / RFC 8414 discovery document and JWKS —
  which describes how a customer signs in, not how a developer gets access. Britain
  mandated the metering infrastructure, not the data right: E.ON Next is bound by the
  Smart Energy Code and the DCC, which is live and implemented, but no consumer
  data-portability mandate equivalent to Australia's CDR or Ontario's Green Button applies
  to it, and none of the open GB market data (NESO Carbon Intensity, Elexon BSC, DNO
  open-data portals) originates here. Consumer data is closed, market data is published by
  other parties, and the only public contract is identity.
image: https://images.ctfassets.net/fxmb2pqc184n/5oYVaG0Ukc9ErXnwbIcXe8/c18e22523f4b37a96b9b41997100ad8c/social-logo.png
tags:
- Energy
- United Kingdom
- Utilities
- Electricity
- Gas
- Smart Metering
- Energy Retail
- Kraken
- Solar
- EV Charging
- Identity
created: '2026-07-27'
modified: '2026-07-27'
specificationVersion: '0.19'
apis:
- aid: eon-next:identity
  name: E.ON Next Customer Identity (OpenID Connect)
  description: >-
    The OpenID Connect / OAuth 2.0 authorization server that authenticates E.ON Next
    customers into the online account and mobile app. It is an Auth0-hosted E.ON group
    CIAM tenant (certificate CN eon-next-uk.eon-ciam.auth0app.com, Cloudflare edge) and it
    serves a complete OIDC Discovery document, the RFC 8414 authorization-server metadata
    alias, and the signing JWKS anonymously — so its grants, endpoints, client
    authentication methods (including private_key_jwt and mTLS with certificate-bound
    tokens), PKCE, device flow, CIBA, DPoP and MFA challenge surface are observable fact
    rather than inference. This is NOT a developer programme: no client registration path
    is documented for third parties, no resource server or domain scope is advertised, and
    no energy data is reachable through it. It is catalogued because it is the only
    machine-readable contract E.ON Next publishes.
  humanURL: https://www.eonnext.com/dashboard/sign-in
  baseURL: https://auth.eonnext.com/
  tags:
  - Identity
  - Authentication
  - OpenID Connect
  - OAuth 2.0
  properties:
  - type: OpenIDConnect
    url: https://auth.eonnext.com/.well-known/openid-configuration
  - type: WellKnown
    url: well-known/eon-next-well-known.yml
  - type: Authentication
    url: authentication/eon-next-authentication.yml
  - type: OAuthScopes
    url: scopes/eon-next-scopes.yml
  - type: Login
    url: https://www.eonnext.com/dashboard/sign-in
common:
- type: WellKnown
  url: well-known/eon-next-well-known.yml
- type: SecurityTxt
  url: well-known/eon-next-security.txt
- type: Authentication
  url: authentication/eon-next-authentication.yml
- type: OAuthScopes
  url: scopes/eon-next-scopes.yml
- type: Conformance
  url: conformance/eon-next-conformance.yml
- type: LLMsTxt
  url: llms/eon-next-llms.txt
- type: VulnerabilityDisclosure
  url: security/eon-next-vulnerability-disclosure.yml
- type: Security
  url: https://www.eonnext.com/.well-known/security.txt
- type: DomainSecurity
  url: security/eon-next-domain-security.yml
- type: Website
  url: https://www.eonnext.com/
- type: LinkedIn
  url: https://www.linkedin.com/company/e-on-next
- type: Blog
  url: https://www.eonnext.com/blog
- type: Support
  url: https://www.eonnext.com/help
- type: Forum
  url: https://community.eonnext.com/
- type: Pricing
  url: https://www.eonnext.com/tariffs
- type: About
  url: https://www.eonnext.com/about
- type: Login
  url: https://www.eonnext.com/dashboard/sign-in
- type: TermsOfService
  url: https://www.eonnext.com/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.eonnext.com/privacy
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com