Scopes - Olira

Scopes are granted at API key creation and cannot be changed afterwards. See Authentication for how scopes map to operations.

Scope	Description
`mcp:patient-state`	Query patient state via the MCP Patient State server
`mcp:integration`	Olira Integration MCP (coming soon)
`sdk:event-log`	Log health events on behalf of patients via the Olira SDK
`sdk:patient-token`	Mint short-lived, patient-locked JWTs for SDK use
`api:manage-patients`	Create, read, update, and deactivate patient records via REST
`api:org-config`	Read and update organization platform configuration via REST
`sdk:state-read`	Read patient state: stable data, event modules, summaries, logs, events, memories
`sdk:historical-ingest`	Upload and manage bulk historical data ingestion jobs

Use olira keys create --scopes … for non-interactive creation, or omit --scopes for the interactive picker.