Scopes
A token without the scope receives
403 INSUFFICIENT_SCOPE. Existing tokens do not get the new scope
automatically; issue a new token under Profile → Security.
Conventions
- Same check as the app. An entry shows its text only while the token owner may open the object it
is about. For an entry whose object they can no longer see, the answer carries
statushidden,deletedorlegacyand no text, no link and no actor. - Own entries only. Every call touches the token owner’s entries and nothing else. An ID that is not
the owner’s answers
404 NOT_FOUND, exactly like an ID that does not exist, and nothing is changed. - Pages. The list is paged with a cursor.
limitis at most 200 and defaults to 50. - Strict bodies. Unknown fields are rejected with
422 VALIDATION_ERROR. - Language. Texts come in the language of the token owner’s profile.