# Insufficient scopes were provided

**URL:** <https://community.hubspot.com/t/insufficient-scopes-were-provided/101509>\
**Category:** APIs & Integrations\
**Tags:** oauth, free\
**Created:** [March 1, 2024, 4:13pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/101509 "2024-03-01T16:13:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![IIt2](https://avatars.discourse-cdn.com/v4/letter/i/e99b99/32.png) [@IIt2](https://community.hubspot.com/u/IIt2)\
**Post date:** [March 1, 2024, 4:13pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/101509/1 "2024-03-01T16:13:21Z")

</div>

I created the application according to the [documentation](https://developers.hubspot.com/docs/api/working-with-oauth) and connected all scopes in general. I included the scopes available to any account in the scopes parameter in the get-request. Further, I have included all other scopes in the optional\_scope parameter. But I still get the error.  
Here is the full url of my request(I replaced client\_id, redirect\_uri and state):  
[https://app.hubspot.com/oauth/45411707/authorize?client\_id=x&optional\_scope=transactional-email+social+content+automation+hubdb+e-commerce+ctas.read&redirect\_uri=x&scope=settings.users.read+cms.domains.read+cms.domains.write+cms.performance.read+crm.lists.read+crm.lists.write+crm.objects.companies.read+crm.objects.companies.write+crm.objects.contacts.read+crm.objects.contacts.write+crm.objects.deals.read+crm.objects.deals.write+crm.objects.line\_items.read+crm.objects.line\_items.write+crm.objects.marketing\_events.read+crm.objects.marketing\_events.write+crm.objects.owners.read+crm.objects.quotes.read+crm.objects.quotes.write+crm.schemas.companies.read+crm.schemas.companies.write+crm.schemas.contacts.read+crm.schemas.contacts.write+crm.schemas.deals.read+crm.schemas.deals.write+crm.schemas.line\_items.read+crm.schemas.quotes.read+settings.billing.write+settings.currencies.write+settings.users.write+settings.users.teams.write+settings.currencies.read+settings.users.teams.read+accounting+actions+account-info.security.read+business-intelligence+communication\_preferences.read+communication\_preferences.read\_write+communication\_preferences.write+conversations.read+conversations.write+crm.export+crm.import+external\_integrations.forms.access+files+files.ui\_hidden.read+forms+forms-uploaded-files+integration-sync+media\_bridge.read+media\_bridge.write+oauth+sales-email-read+tickets+timeline&state=y](https://app.hubspot.com/oauth/45411707/authorize?client_id=x&optional_scope=transactional-email+social+content+automation+hubdb+e-commerce+ctas.read&redirect_uri=x&scope=settings.users.read+cms.domains.read+cms.domains.write+cms.performance.read+crm.lists.read+crm.lists.write+crm.objects.companies.read+crm.objects.companies.write+crm.objects.contacts.read+crm.objects.contacts.write+crm.objects.deals.read+crm.objects.deals.write+crm.objects.line_items.read+crm.objects.line_items.write+crm.objects.marketing_events.read+crm.objects.marketing_events.write+crm.objects.owners.read+crm.objects.quotes.read+crm.objects.quotes.write+crm.schemas.companies.read+crm.schemas.companies.write+crm.schemas.contacts.read+crm.schemas.contacts.write+crm.schemas.deals.read+crm.schemas.deals.write+crm.schemas.line_items.read+crm.schemas.quotes.read+settings.billing.write+settings.currencies.write+settings.users.write+settings.users.teams.write+settings.currencies.read+settings.users.teams.read+accounting+actions+account-info.security.read+business-intelligence+communication_preferences.read+communication_preferences.read_write+communication_preferences.write+conversations.read+conversations.write+crm.export+crm.import+external_integrations.forms.access+files+files.ui_hidden.read+forms+forms-uploaded-files+integration-sync+media_bridge.read+media_bridge.write+oauth+sales-email-read+tickets+timeline&state=y)

---

<div class="post-metadata">

**Author:** ![Kevin-C](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/kevin-c/32/34570_2.png) [@Kevin-C](https://community.hubspot.com/u/Kevin-C)\
**Post date:** [March 1, 2024, 7:41pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/101509/2 "2024-03-01T19:41:33Z")

</div>

Hey @IIt2

 ![KevinC_0-1709321709480.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/a/6/a696024f1e528ebfd16da8b9cada323afb0ebbdd.png)

If you retrieve the install URL from your developer account, pictured above do you see the same issue?

Its worth checking is that you’re sure the scope are set correcting in the developer account UI, and that they match the scopes being passed in:

 ![KevinC_1-1709321759213.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/b/e/be9ab5244c0a3ebfc1e4ec09ccf53eed8769dee0.png)

Finally, making updates to the scopes can take time for the syste to fully update. If you’re rapidly testing it might be worth slowing down a little to ensure everything is caught up.

Happy to help out however I can!

Best,

---

<div class="post-metadata">

**Author:** ![IIt2](https://avatars.discourse-cdn.com/v4/letter/i/e99b99/32.png) [@IIt2](https://community.hubspot.com/u/IIt2)\
**Post date:** [March 4, 2024, 12:23pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/101509/3 "2024-03-04T12:23:32Z")

</div>

I used the install url and it works, but it doesn’t use the optional\_scope parameter that I would like to use. The scopes that are passed are strictly as set in the application. The issue is that some scopes are passed in the optional\_scope parameter, instead of the scope parameter.
