Scopes

Ask for only what you need. clients:read, clients:write, routes:read, routes:write, timesheets:read, webhooks:manage. A missing scope returns 403 permission_error naming it.