OAuth Scopes

OAuth scopes are the specific permissions an application requests when it is granted access to a user’s account, limiting what it can read or do under that authorization.

Scopes implement least privilege: an app granted only the permissions it needs cannot exceed them, which contains the damage if its credentials are compromised.

For agents that act on a user’s behalf, narrowly scoped authorization is central to credential security and safe deployment.