generated: '2026-08-26'
method: probed
source: >-
  https://cognito-idp.us-west-1.amazonaws.com/us-west-1_pMO3JfnoS/.well-known/openid-configuration
  (HTTP 200, fetched 2026-08-26) — the discovery document for the Amazon Cognito user pool named in
  Sensely's own published Web SDK bundle.
api: sensely-platform-api
note: >-
  Sensely publishes no scopes or permissions reference. The only authorization vocabulary that can be
  read without credentials is the scope list advertised by its Cognito user pool, which is the stock
  OIDC set — Cognito supports custom resource-server scopes and none are declared here. The partner
  credential flow at apis.sensely.com/authenticate/authenticate is not scope-bearing: it returns an
  opaque token pair, and any per-partner entitlement is carried by the procedureId and program code
  rather than by a scope.
scope_count: 4
scopes:
- name: openid
  description: 'Standard OIDC scope; requests an id token.'
  source: cognito-discovery
- name: email
  description: "Grants access to the user's email address and email_verified claims."
  source: cognito-discovery
- name: phone
  description: "Grants access to the user's phone_number and phone_number_verified claims."
  source: cognito-discovery
- name: profile
  description: 'Grants access to standard OIDC profile claims.'
  source: cognito-discovery
custom_scopes: []
gaps:
- 'No custom resource-server scopes declared on the Cognito pool.'
- 'No published permissions or roles reference for partner API access.'