generated: '2026-09-04' method: probed source: https://my-wingtra.eu.auth0.com/.well-known/openid-configuration docs: null note: >- Wingtra publishes no scope or permission reference — there is no developer portal to publish one on. The scopes below are the `scopes_supported` array the Wingtra Auth0 tenant serves in its own OIDC discovery document, fetched anonymously. They are standard OIDC identity scopes: the tenant advertises no Wingtra product scope (nothing for drones, licences, sites, flights or files), which means the portal GraphQL API and the WingtraCLOUD REST API do not express authorization as OAuth scopes. Authorization is carried instead by tenant membership and by the `assigned_roles` array the login mutation returns, neither of which is documented publicly. scope_count counts what is served, not what governs the API. scope_count: 14 issuer: https://my-wingtra.eu.auth0.com/ scopes: - {name: openid, description: OIDC — request an ID token., standard: true} - {name: profile, description: OIDC — basic profile claims., standard: true} - {name: email, description: OIDC — email address., standard: true} - {name: email_verified, description: Whether the email address has been verified., standard: true} - {name: offline_access, description: OIDC — issue a refresh token., standard: true} - {name: name, description: Full name claim., standard: true} - {name: given_name, description: Given name claim., standard: true} - {name: family_name, description: Family name claim., standard: true} - {name: nickname, description: Nickname claim., standard: true} - {name: picture, description: Profile picture URL claim., standard: true} - {name: phone, description: Phone number claim., standard: true} - {name: address, description: Address claim., standard: true} - {name: created_at, description: 'Auth0 extension — account creation timestamp.', standard: false} - {name: identities, description: 'Auth0 extension — linked identity providers for the account.', standard: false} product_scopes: count: 0 note: >- None. No scope in the tenant names a Wingtra resource, so no API-level scope surface exists to document. x-evidence: fetched: '2026-09-04' probes: - {url: 'https://my-wingtra.eu.auth0.com/.well-known/openid-configuration', http_status: 200}