🔐
AB-130
OAuth scopes defined
What it means
Your OAuth metadata declares scopes_supported.
Why it matters
Scopes let agents request narrowly-permissioned tokens. Without scopes, agents get all-or-nothing access, which is unsafe for autonomous operations.
✗
What's wrong
OAuth metadata has no scopes_supported field.
✓
What's right
OAuth metadata: { scopes_supported: ['read', 'write', 'admin'] }
Check this rule on your site
Enter your URL to check just this one rule (AB-001).