Each operation requires one scope. A practice admin grants scopes in Settings → API Keys. The public reference marks the scope on each operation as x-required-scope.
Standard scopes
clients:readclients:writepatients:readpatients:writeappointments:readappointments:writeinvoices:readimaging:readimaging:writeinventory:readdocuments:readwaitlist:readreminders:readtasks:read
Opt-in scopes
These are grantable, and they are not included unless an admin selects them. They cover clinical records, messages, inventory changes, and invoice finalisation.
clinical:readsoap:readsoap:writeconsultations:readvitals:readvitals:writelabs:readlabs:writediagnoses:readdiagnoses:writeproblems:readproblems:writeprocedures:readprocedures:writeanaesthesia:readanaesthesia:writeconsent:readconsent:writetreatments:readtreatments:writehome_sheets:readweights:readallergies:readallergies:writeinvoice_lines:readpayments:readestimates:readestimates:writeestimates:issuereminders:writepet_plans:readprocurement:readprocurement:writeprocurement:commitcd:readdocuments:contentcommunications:readvaccinations:writeinventory:writeinventory:movetasks:writeinvoices:finalisemessages:send
Not grantable
These scopes are internal. Settings cannot put them on a partner key: vm_ingest:write, agent:run, *.