data:read, then add permissions for a specific workflow. Active Pro access is required in addition to the listed scopes.
Compose permissions by workflow
For basic carrier search, usedata:read. Add contacts:read if you need permitted contact fields. Without it, restricted contact fields are omitted; an omitted field does not establish that the source value is unknown.
For a catalog CSV, use exports:write, exports:read and contacts:read. A renewal export also requires insurance:read. Edition selections must remain accessible to the owner.
For changes filtered to a watchlist, use data:read and watchlists:read. Insurance-related results remain subject to insurance permission and availability.
Credential scopes do not replace owner confirmation for historical access or MCP export review. Public developer credentials cannot manage keys, billing or webhook signing secrets.