OAuth scopes
Permission scopes for Hypery OAuth apps and API access
Scopes constrain delegated OAuth tokens. First-party session cookies and personal API keys (ak_…) are not scope-gated — they act as the user.
An OAuth app may only mint scopes that appear in both:
- The global allowlist below
- The scopes registered on that app
AI scopes
Embeddings and audio do not inherit from ai:chat.
Account & billing
billing:charge is required for usage charges — ai:chat / write alone are rejected.
Least privilege
Example for a chat + voice + RAG + browser app:
read write ai:chat ai:embeddings ai:audio ai:images ai:models billing:read billing:charge