generated: '2026-07-19'
method: searched
source: https://honest.com/.well-known/openid-configuration
docs: https://honest.com/.well-known/oauth-authorization-server
notes: >-
  OAuth2 scopes advertised by the Shopify Customer Account API authorization
  server that honest.com delegates authentication to. Captured verbatim from the
  live OIDC discovery document's scopes_supported. Note the
  customer-account-mcp-api scope, which authorizes agent/MCP access to the
  customer account surface.
schemes:
- name: ShopifyCustomerAccountOIDC
  source: well-known/honest-company-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/64768475320/oauth/authorize
    tokenUrl: https://shopify.com/authentication/64768475320/oauth/token
scopes:
- scope: openid
  description: OpenID Connect authentication; issue an ID token.
  flows: [authorizationCode]
  sources: [well-known/honest-company-openid-configuration.json]
- scope: email
  description: Access the shopper's email address.
  flows: [authorizationCode]
  sources: [well-known/honest-company-openid-configuration.json]
- scope: customer-account-api:full
  description: Full access to the Shopify Customer Account API for the authenticated shopper.
  flows: [authorizationCode]
  sources: [well-known/honest-company-openid-configuration.json]
- scope: customer-account-mcp-api:full
  description: Full agent/MCP access to the Customer Account API for the authenticated shopper.
  flows: [authorizationCode]
  sources: [well-known/honest-company-openid-configuration.json]