generated: '2026-09-04'
method: probed
source: https://www.virtuix.com/.well-known/openid-configuration
docs: https://shopify.dev/docs/api/customer
note: >-
  Derived from no OpenAPI — Virtuix publishes none. These are the scopes the OIDC discovery document
  served on Virtuix's own host advertises for its Shopify customer-account authorization server.
schemes:
  - name: shopify-customer-account-oidc
    source: well-known/virtuix-openid-configuration.json
    flows:
      - flow: authorizationCode
        authorizationUrl: https://shopify.com/authentication/60989898907/oauth/authorize
        tokenUrl: https://shopify.com/authentication/60989898907/oauth/token
scopes:
  - scope: openid
    description: Standard OpenID Connect scope; requests an ID token for the storefront customer.
    flows: [authorizationCode]
    sources: [well-known/virtuix-openid-configuration.json]
  - scope: email
    description: Releases the customer's email address and email_verified claim.
    flows: [authorizationCode]
    sources: [well-known/virtuix-openid-configuration.json]
  - scope: customer-account-api:full
    description: Full access to the storefront Customer Account API for the authenticated Virtuix shopper.
    flows: [authorizationCode]
    sources: [well-known/virtuix-openid-configuration.json]
  - scope: customer-account-mcp-api:full
    description: >-
      Full access to the customer-account MCP surface — the scope that lets an agent act on the
      shopper's own account against the Virtuix store rather than only the anonymous catalog.
    flows: [authorizationCode]
    sources: [well-known/virtuix-openid-configuration.json]
claims_supported: [iss, sub, aud, exp, iat, nonce, sid, email, email_verified]