Hi @tompp , I have been using the Typescript language but I have also used the token created with CURL to test it out. The agents scopes are enabled. I include them in a react application using the createPublicOauthClient under @osdk/oauth where I invoke the following scopes:
scopes: [
"api:read-data",
"api:write-data",
"api:use-ontologies-read",
"api:use-ontologies-write",
"api:use-aip-agents-read",
"api:use-aip-agents-write",
]
And I can confirm they are included in the scopes:
{
"type": "union",
"scopes": [
{
"type": "intersection",
"scopes": [
{
"type": "operation",
"operations": [
"api:use-ontologies-write",
"api:use-ontologies-read",
"api:read-data",
"api:use-aip-agents-read",
"api:use-aip-agents-write",
"api:write-data"
]
},
{
"type": "resource",
"resourceIds": [
[REDACTED]
],
"includeChildren": true
},
{
"type": "operation",
"operations": [
"api:read-data",
"api:write-data"
]
}
]
},
{
"type": "intersection",
"scopes": [
{
"type": "resource",
"resourceIds": [
"ri.multipass..organization.root"
],
"includeChildren": true
},
{
"type": "operation",
"operations": [
"organization:discover",
"organization:groups",
"organization:users"
]
}
]
}
]
}
Only thing noteworthy is that Foundry Platform access is disabled for the organization of the user and AIP Agent Studio isn’t enabled either on that org. Still the project housing the agent is accessible with viewer permission to the user. Below is the access of the user to the agent: