Changed
- A 403 from
user.scope:<scope>now includesmissing_scope, and a 403 fromuser.permission:<code>includesmissing_permission. The existingerrorandmessagefields are unchanged. A plain-HTTP script or personal-token client can now tell which scope or permission it lacks. - The
user_meMCP tool description says it needs scoperead.
Requires SummerCMS v0.5.0.