{"uid":"cap_kotfIkb0Hp6ifn1T-Au1y","slug":"delx-oauth-scope-audit-c3494297","name":"Delx OAuth Scope Audit","description":"Compare requested OAuth scopes with the minimum required scopes. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization and produ…","url":"https://api.delx.ai/api/v1/x402/oauth-scope-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"required":{"type":"array","description":"Input field: required."},"requested":{"type":"array","description":"Input field: requested."}}},"responseSchema":{"type":"json","example":{"excess":["write"],"schema":"delx/util-oauth-scope-audit/v1","missing":[],"sufficient":true,"least_privilege":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Tqf-ZvOXKmGaiR1tuzRN6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Compares a list of requested OAuth scopes against the minimum required scopes and returns a deterministic JSON audit result for preflight validation in agent workflows.","exampleAgentPrompt":"Can you audit these OAuth scopes for me? The minimum required scopes are ['read:profile', 'read:email'] but the integration is requesting ['read:profile', 'read:email', 'write:posts', 'delete:account'] — flag anything excessive.","exampleUseCases":[{"title":"Third-party integration scope review","prompt":"Before we approve this third-party integration, check whether the scopes it's requesting go beyond what's actually needed. Required scopes are ['read:orders', 'read:products'] and it's asking for ['read:orders', 'read:products', 'write:orders', 'admin:store']."},{"title":"Pre-deployment security preflight","prompt":"Run an OAuth scope audit before we deploy this microservice — the minimum required scopes are ['openid', 'profile'] but the service config has ['openid', 'profile', 'email', 'phone', 'address', 'offline_access'] listed as requested."},{"title":"Agent workflow authorization check","prompt":"I want to do a preflight check on the OAuth scopes for this agent step. The only scopes it needs are ['repo:read', 'issues:read'] but it's currently configured to request ['repo:read', 'repo:write', 'issues:read', 'issues:write', 'admin:org']. Tell me what's excessive."}],"resultDescription":"Returns a deterministic machine-readable JSON object indicating which requested scopes exceed the minimum required, which required scopes are missing from the request, and an overall compliance or pass/fail status for the scope comparison.","failureModes":["Missing or empty 'required' or 'requested' arrays returns a validation error","Malformed input arrays (non-string items) may cause a parse error","Network or payment authorization failure returns HTTP 402 or 4xx","Duplicate scope entries may affect comparison results depending on implementation"],"whenToPreferThis":"Choose this endpoint when you need a lightweight, stateless, deterministic preflight step to enforce least-privilege OAuth scope policies inside an automated agent workflow — especially before granting a third-party integration, deploying a new service, or approving an agent action that requires OAuth-based authorization. It is ideal when you need machine-readable output and want to avoid retaining any input data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:57:50.903Z","isFirstParty":false}