Hidden scopes crm.objects.emails.read / write needed for app

App Client ID: 110a69ea-0f55-44ae-8460-4c8b9684d5f7
Problem: When my app calls GET /crm/v3/objects/emails, HubSpot returns HTTP 403 with category: MISSING_SCOPES and lists three acceptable scopes in requiredGranularScopes:
- crm.schemas.emails.read
- crm.objects.emails.read
- sales-email-read

The sales-email-read scope is silently dropped from OAuth grants (deprecated in Sep 2025 rollup). The two granular scopes are not selectable in my app’s Auth tab — they don’t
appear in the scope picker dropdown despite the API requiring them. Other users have reported the same pattern with crm.objects.notes.*. Please enable scope visibility for this app, or advise the correct alternative scope that grants access to /crm/v3/objects/emails.
Tag: oauth-scopes

Hi @Chief1901,

Welcome to the Community!

It could be worth taking a look at the related community thread linked below to see if any of the workarounds there apply to your portal.

The current scope requirements for the endpoint are also outlined in the Activities | Email API guide.

I’d also like to tag in some of our Top Contributors to see if they’ve run into this scope visibility pattern before:

Hey @SteveHTM, @Anton, @evaldas -- Do you have any suggestions on this?

Thanks in advance!

Sam, Community Manager