Build an app

Scopes

Every access token carries an explicit scope list. Missing a scope returns HTTP 403 with code insufficient_scope.

ScopeWhat it unlocks
Read invoices
documents:read		List and fetch documents and extractions.
Upload invoices
documents:write		POST /v1/extract.
Read review queue
review:read		GET /v1/review-queue.
Resolve review items
review:write		POST /v1/review-queue/:id/resolve.
Workspace details
workspace:read		Categories and related workspace metadata.
Usage
usage:read		GET /v1/usage.
Stats
stats:read		GET /v1/stats/overview.

Register only the scopes your app needs. Users see the same list on the consent screen before they Approve.