Scopes

15 scopes, per-resource-and-verb rather than blanket. A connection's ofmcp_ token carries a subset; a tool is only registered on that connection if the token holds the scope it needs.

Scope	Grants
applications:read	Read applications and their sub-resources (insights, interview prep).
applications:write	Create/update applications, generate insights, interview prep, and outreach messages.
resumes:read	Read resumes, including PDF export and tailor-run history.
resumes:write	Create/update resumes, including AI tailoring.
library:read	Read Career Library entries (experiences, projects, skills, education).
library:write	Create/update Career Library entries.
identities:read	Read identity/contact blocks.
identities:write	Create/update identity/contact blocks.
repositories:read	Read linked code repositories.
repositories:write	Create/update linked code repositories.
cover-letters:read	Read cover letters.
cover-letters:write	Create/update/regenerate cover letters.
tasks:read	Read follow-up tasks attached to applications.
tasks:write	Create/update follow-up tasks.
ai:generate	Invoke AI actions — extraction, tailoring, screening, quantifying, and message generation.

Source: packages/mcp-tool-server/src/core/constants.ts.