If you are recruiting / ops
You only care about scopes when someone with the developer (or admin/owner) role creates a key for n8n, Zapier, or a custom integration. Ask them to use the smallest set that matches the workflow (invite-only vs full access). Empty scopes = full access (legacy). Prefer limiting them. Create keys: Authentication.Scope matrix
Missing scope → 403
INSUFFICIENT_SCOPE.