OAuth Scope

An OAuth scope is a label that defines the specific permissions carried by an access token. Scopes limit what an agent can do, such as reading a document but not deleting it, and are a core mechanism for enforcing least privilege.