Scopes

Scopes keep integrations focused. Choose the smallest set that completes the job.

Scope	Use it for
discovery	Reading counts, fields, segments, audiences, and workflow status
purchase	Creating or changing segments and audiences, resolving records, enriching data, and delivering results
account	Managing API keys, webhooks, destinations, billing, and usage settings

A token without the required scope receives a 403 response that names the scope to add:

{
  "error": "Forbidden",
  "code": "SCOPE_REQUIRED",
  "message": "This action requires the 'purchase' scope.",
  "required_scope": "purchase"
}

Keep account for trusted account-management services. Creating and revoking keys also requires the caller to be an organization owner or admin.

OAuth connections can request only the scopes approved for that partner app, and the customer may grant a smaller subset during consent.