LOW RISK
products.read
Read products
AEUC API
Scoped access, not all-or-nothing access.
Production integrations should use OAuth or server credentials, request the minimum scopes needed, follow rate limits, and expose permission changes to the user.
MEDIUM RISK
products.write
Create/update products
MEDIUM RISK
orders.read
Read orders
HIGH RISK
fulfillment.write
Create fulfillment updates
HIGH RISK
customers.read
Read limited customer data
MEDIUM RISK
marketing.write
Create marketing assets/campaign drafts
MEDIUM RISK
media.read
Read authorized files/media
MEDIUM RISK
media.write
Create/update authorized files/media
MEDIUM RISK
ai.use
Use approved AEUC AI services
HIGH RISK
wallet.read
Read approved wallet/account data
High-risk scopes such as customer data, fulfillment writes and wallet-related access require stronger review and should never be silently granted.