Authorization Scopes

Authorization scopes define the specific boundaries of access granted to a third-party application, such as read-only data access or the ability to execute trades. By segmenting permissions into scopes, users can grant only what is necessary for the application to function, adhering to the principle of least privilege.

For example, a tax tool would only require a read-only scope, while a portfolio rebalancing bot would require trading scopes. This granularity is essential for protecting assets, as it ensures that even if an application is compromised, the damage is limited to the specific scope granted.

Clear scope definitions are a standard feature of modern financial API design.