Companion

This scope is required for all atproto OAuth sessions. The semantics are somewhat similar to the openid scope: inclusion of it confirms that the client is using the atproto profile of OAuth and will comply with all the requirements laid out in this specification. No access to any atproto-specific PDS resources will be granted without this scope included.

Equivalent to adding the "DM Access" toggle for "App Passwords"

Access to the account email address

Broad PDS account permissions, equivalent to the previous "App Password" authorization level: