Tickets use the granular crm.objects.tickets.read, crm.objects.tickets.write, crm.schemas.tickets.read and crm.schemas.tickets.write scopes. They replaced the single tickets scope in September 2026: an app that still requests tickets fails to deploy, but installs made before keep it, and their tokens still report tickets.
Documented
More facts from this area
hs api <endpoint> --account=<id> --jsonauthenticates with the CLI's personal access key, which reaches portals that have nopat-token, including the legacy/content/api/v2/*endpoints.Measured- Legacy private apps and legacy public apps become unsupported in September 2027; existing private-app tokens keep working until then.Documented
- A public OAuth app can't read object tags:
GET /crm/object-tags/{v}/0-3returns 403 "The scope needed for this API call isn't available for public use".Measured - The CLI's personal access key isn't usable as a bearer token (401
EXPIRED_AUTHENTICATION); onlypat-private-app tokens are.Measured - Creating legacy private apps is disabled for new accounts from September 28, 2026 and for existing accounts from October 26, 2026; service keys replace them.Documented
Spriggit uses these facts when it plans changes. See something out of date? Email [email protected]