Choosing least-privilege scopes

Grant a key only the scopes your integration needs. For example, a read-only mail assistant needs just mail:read; a drafting tool that shouldn’t send needs mail:write without mail:send.