List API scopes and what this key holds

{
  "scopes": [
    {
      "scope": "agents:write",
      "description": "Create, replace, update, clone and archive agents.",
      "granted": true,
      "routes": [
        "DELETE /v2/agents/{agent_id}",
        "PATCH /v2/agents/{agent_id}",
        "POST /v2/agents",
        "POST /v2/agents/{agent_id}/clone",
        "PUT /v2/agents/{agent_id}"
      ]
    }
  ],
  "key": {
    "key_id": "key_1a2b3c4d5e6f7890",
    "organization_id": "organization-live-EXAMPLE",
    "scopes_source": "grandfathered",
    "grandfathered": false,
    "granted": [
      "agents:read",
      "agents:write",
      "calls:read",
      "calls:write"
    ]
  },
  "note": "A key minted before scopes existed carries no scopes field and is treated as holding all of them; an explicitly empty list grants nothing. EVERY endpoint that changes something is in this table. The endpoints with no entry are read-only and need only a valid key: GET /v2/user/me, /v2/usage, /v2/api-keys, /v2/scopes, /v2/phone-numbers, /v2/providers, /v2/inbound-agents, the webhook subscription and delivery reads under /v2/webhooks, the knowledge-base reads under /v2/knowledge-bases, and the A/B experiment reads under /v2/agents/{agent_id}/versions. There is no read scope for webhooks or knowledge bases, which is why their reads are ungated and their writes are not. keys:write is never granted implicitly."
}