Definition
Full definition of oauth scopes
When you authorize an integration via OAuth, the app asks for a specific set of permissions called scopes. Slack might request channels:read + chat:write; Google might request gmail.send + gmail.readonly. Scopes are the principle of least privilege applied to API access — only request what you'll actually use. Tiny Command shows you exactly which scopes a connection requires before you authorize.
In practice
OAuth Scopes examples
Gmail scopes
https://www.googleapis.com/auth/gmail.send is more limited than https://www.googleapis.com/auth/gmail.modify.
Used by
Apps that exemplify oauth scopes
See oauth scopes in action across real integrations.
FAQ
Common questions about oauth scopes
Can I revoke OAuth scopes later?
Yes — you can disconnect the integration from the app's OAuth settings page. The token becomes invalid immediately.
Why do some integrations request lots of scopes?
Either the integration genuinely needs broad access, or the developer was lazy and requested the maximum. Read the scope list before approving.
