generated: '2026-08-05'
method: searched
source: https://voyagefoods.com/.well-known/openid-configuration
note: >-
  Scopes are not derived from an OpenAPI (Voyage Foods publishes none). They are read verbatim from
  the scopes_supported array of the OIDC discovery / RFC 8414 authorization-server metadata document
  the storefront serves at voyagefoods.com/.well-known/. Descriptions below state what each scope
  gates on the Shopify Customer Accounts issuer that backs this storefront; the storefront itself
  publishes no scope reference page.
schemes:
- name: ShopifyCustomerAccountsOIDC
  issuer: https://shopify.com/authentication/59465728192
  source: well-known/voyage-foods-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://shopify.com/authentication/59465728192/oauth/authorize
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
    pkce: S256
  - flow: refreshToken
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
  - flow: 'urn:ietf:params:oauth:grant-type:jwt-bearer'
    tokenUrl: https://shopify.com/authentication/59465728192/oauth/token
scopes:
- scope: openid
  description: Standard OpenID Connect scope; requests an ID token identifying the signed-in customer.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: email
  description: Releases the customer's email address and email_verified claim in the ID token.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: 'customer-account-api:full'
  description: >-
    Full access to the Shopify Customer Account API on behalf of the signed-in customer — orders,
    addresses, profile and subscription data for this shop.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
- scope: 'customer-account-mcp-api:full'
  description: >-
    Full access to the Customer Account MCP API — the authenticated, customer-scoped MCP surface,
    distinct from the anonymous UCP shopping MCP endpoint at /api/ucp/mcp.
  flows: [authorizationCode]
  sources: [well-known/voyage-foods-openid-configuration.json]
not_scope_gated:
- surface: https://voyagefoods.com/api/2026-04/graphql.json
  reason: Public storefront reads are anonymous; no OAuth scope is presented.
- surface: https://voyagefoods.com/api/ucp/mcp
  reason: >-
    UCP tool access is gated on an agent profile URI (meta.ucp-agent.profile), not on OAuth scopes.
x-evidence:
  fetched: '2026-08-05'
  url: https://voyagefoods.com/.well-known/openid-configuration
  http_status: 200
  content_type: application/json; charset=utf-8
  scopes_supported_returned: 4