#oauth scopes for ai apps

How Much Access Should an AI Agent Get?

Give an agent only the permissions its task needs: its own account, read-only where possible, narrow scopes, limits and fast revocation.