Permissions

What each scope allows. People see these before they allow; ask only for what your app uses.

Scope	What it allows
`openid`	Sign in. Stable account ID. Always included.
`profile`	Public profile. Username, display name, avatar, join date.
`offline_access`	Stay signed in. Refresh tokens, so people don't sign in again until they remove the app.
`content:read`	Posts and profiles. Feed, posts, comments, profiles and follower lists as the user sees them, including private accounts they follow.
`search:read`	Search. People, posts, hashtags and topics.
`library:read`	Saved posts and likes. The posts the user saved and liked.
`notifications:read`	Notifications. Likes, replies, mentions and follows; mark as read. Never DMs or security notices.
`settings:read`	Settings. Privacy, notification, feed and translation settings. Never password, two-factor or sessions.
`posts:write`	Publish posts. Text, photos, audio, GIFs, long posts and scheduling. Rate limited.
`posts:interact`	Like, repost, comment. In the user's name. Rate limited.
`library:write`	Save posts. Add and remove saved posts.
`follows:write`	Follow. Follow and unfollow; approve or decline follow requests.
`profile:write`	Edit profile. Display name, bio, links, profile photo and banner. Not username, password or security.
`posts:manage`	Edit and delete posts and comments. Including ones made outside your app.
`safety:manage`	Block, mute, report. See and change blocked and muted accounts; send reports. Blocking removes follows.
`settings:write`	Change settings. Private account, who can message or mention, notifications, feed and translation. Not username, password or two-factor.