The Noonlight API currently has a handful of available scopes which are required to make certain requests. Some of these scopes are privileged and require Noonlight approval before being able to use them. Requesting scopes that are not approved for your client will result in the unauthorized scopes being dropped at token creation.

ScopeDescription
write:alarmRequired for any POST or PUT request to any of the /alarms endpoints
read:alarmRequired for any GET request to any of the /alarms endpoints
read:profile.idRequired to return id from a GET request to the /profiles/me endpoint
read:profile.phoneRequired to return phone from a GET request to the /profiles/me endpoint
verify:pinRequired to verify pin through the /verifications endpoint