When installing the extension we ask for an access token. It would be great to specify what scopes should be enabled for this token