integrate-sdk 0.8.74-dev.0 → 0.8.75-dev.0

package/dist/adapters/tanstack-start.js

@@ -2629,6 +2629,7 @@ function githubIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GITHUB_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GITHUB_CLIENT_SECRET"),
     scopes: config.scopes || ["repo", "user"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.github.com",
@@ -2716,6 +2717,7 @@ function gmailIntegration(config = {}) {
       "https://www.googleapis.com/auth/gmail.modify",
       "https://www.googleapis.com/auth/gmail.labels"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -2752,6 +2754,7 @@ function notionIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("NOTION_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("NOTION_CLIENT_SECRET"),
     scopes: [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       owner: config.owner || "user",
@@ -2817,6 +2820,7 @@ function slackIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("SLACK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("SLACK_CLIENT_SECRET"),
     scopes: config.scopes || ["chat:write", "channels:read", "users:read", "search:read", "files:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -2860,6 +2864,7 @@ function linearIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("LINEAR_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("LINEAR_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write", "issues:create", "comments:create"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -2927,6 +2932,7 @@ function vercelIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("VERCEL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("VERCEL_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -2970,6 +2976,7 @@ function zendeskIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ZENDESK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ZENDESK_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       subdomain: config.subdomain ?? getEnv("ZENDESK_SUBDOMAIN"),
@@ -3014,6 +3021,7 @@ function stripeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("STRIPE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("STRIPE_CLIENT_SECRET"),
     scopes: config.scopes || ["read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3057,6 +3065,7 @@ function gcalIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GCAL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GCAL_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/calendar"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3100,6 +3109,7 @@ function outlookIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("OUTLOOK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("OUTLOOK_CLIENT_SECRET"),
     scopes: config.scopes || ["Mail.Read", "Mail.Send", "Calendars.ReadWrite", "Contacts.Read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3151,6 +3161,7 @@ function airtableIntegration(config = {}) {
       "schema.bases:write",
       "webhook:manage"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3209,6 +3220,7 @@ function todoistIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("TODOIST_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("TODOIST_CLIENT_SECRET"),
     scopes: config.scopes || ["data:read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3252,6 +3264,7 @@ function whatsappIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("WHATSAPP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("WHATSAPP_CLIENT_SECRET"),
     scopes: config.scopes || ["business_management", "whatsapp_business_messaging", "whatsapp_business_management"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       businessAccountId: config.businessAccountId,
@@ -3295,6 +3308,7 @@ function calcomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("CALCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("CALCOM_CLIENT_SECRET"),
     scopes: config.scopes || ["READ_BOOKING", "WRITE_BOOKING", "READ_PROFILE", "WRITE_PROFILE"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.cal.com/v1",
@@ -3383,6 +3397,7 @@ function rampIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("RAMP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("RAMP_CLIENT_SECRET"),
     scopes: config.scopes || ["transactions:read", "cards:read", "users:read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.ramp.com/v1",
@@ -3427,6 +3442,7 @@ function onedriveIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ONEDRIVE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ONEDRIVE_CLIENT_SECRET"),
     scopes: config.scopes || ["Files.Read", "Files.ReadWrite", "offline_access"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3478,6 +3494,7 @@ function gworkspaceIntegration(config = {}) {
       "https://www.googleapis.com/auth/presentations",
       "https://www.googleapis.com/auth/drive.readonly"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3543,6 +3560,7 @@ function polarIntegration(config = {}) {
       "metrics:read",
       "organizations:read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.polar.sh"
@@ -3612,6 +3630,7 @@ function figmaIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("FIGMA_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("FIGMA_CLIENT_SECRET"),
     scopes: config.scopes || ["files:read", "file_comments:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3655,6 +3674,7 @@ function intercomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("INTERCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("INTERCOM_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3708,6 +3728,7 @@ function hubspotIntegration(config = {}) {
       "crm.objects.tickets.write",
       "crm.objects.owners.read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3770,6 +3791,7 @@ function youtubeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("YOUTUBE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("YOUTUBE_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/youtube.readonly"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3847,6 +3869,7 @@ function genericOAuthIntegration(config) {
     clientId: config.clientId ?? getEnv(`${providerUpper}_CLIENT_ID`),
     clientSecret: config.clientSecret ?? getEnv(`${providerUpper}_CLIENT_SECRET`),
     scopes: config.scopes,
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -10561,6 +10584,7 @@ function createMCPServer(config) {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }));
       return Response.json({ integrations });
@@ -11524,6 +11548,7 @@ class OAuthHandler {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }))
     };
@@ -11566,6 +11591,10 @@ class OAuthHandler {
     if (scopes.length > 0) {
       url.searchParams.set("scope", scopes.join(","));
     }
+    const optionalScopes = authorizeRequest.optionalScopes || providerConfig.optionalScopes || [];
+    if (optionalScopes.length > 0) {
+      url.searchParams.set("optional_scope", optionalScopes.join(","));
+    }
     url.searchParams.set("state", authorizeRequest.state);
     url.searchParams.set("code_challenge", authorizeRequest.codeChallenge);
     url.searchParams.set("code_challenge_method", authorizeRequest.codeChallengeMethod);
@@ -11577,10 +11606,12 @@ class OAuthHandler {
       "clientId",
       "clientSecret",
       "scopes",
+      "optionalScopes",
       "redirectUri",
       "client_id",
       "client_secret",
       "scope",
+      "optional_scope",
       "redirect_uri",
       "provider"
     ]);

package/dist/index.js

@@ -3020,6 +3020,7 @@ function githubIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GITHUB_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GITHUB_CLIENT_SECRET"),
     scopes: config.scopes || ["repo", "user"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.github.com",
@@ -3107,6 +3108,7 @@ function gmailIntegration(config = {}) {
       "https://www.googleapis.com/auth/gmail.modify",
       "https://www.googleapis.com/auth/gmail.labels"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -3143,6 +3145,7 @@ function notionIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("NOTION_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("NOTION_CLIENT_SECRET"),
     scopes: [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       owner: config.owner || "user",
@@ -3208,6 +3211,7 @@ function slackIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("SLACK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("SLACK_CLIENT_SECRET"),
     scopes: config.scopes || ["chat:write", "channels:read", "users:read", "search:read", "files:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3251,6 +3255,7 @@ function linearIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("LINEAR_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("LINEAR_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write", "issues:create", "comments:create"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3318,6 +3323,7 @@ function vercelIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("VERCEL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("VERCEL_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3361,6 +3367,7 @@ function zendeskIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ZENDESK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ZENDESK_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       subdomain: config.subdomain ?? getEnv("ZENDESK_SUBDOMAIN"),
@@ -3405,6 +3412,7 @@ function stripeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("STRIPE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("STRIPE_CLIENT_SECRET"),
     scopes: config.scopes || ["read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3448,6 +3456,7 @@ function gcalIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GCAL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GCAL_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/calendar"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3491,6 +3500,7 @@ function outlookIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("OUTLOOK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("OUTLOOK_CLIENT_SECRET"),
     scopes: config.scopes || ["Mail.Read", "Mail.Send", "Calendars.ReadWrite", "Contacts.Read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3542,6 +3552,7 @@ function airtableIntegration(config = {}) {
       "schema.bases:write",
       "webhook:manage"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3600,6 +3611,7 @@ function todoistIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("TODOIST_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("TODOIST_CLIENT_SECRET"),
     scopes: config.scopes || ["data:read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3643,6 +3655,7 @@ function whatsappIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("WHATSAPP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("WHATSAPP_CLIENT_SECRET"),
     scopes: config.scopes || ["business_management", "whatsapp_business_messaging", "whatsapp_business_management"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       businessAccountId: config.businessAccountId,
@@ -3686,6 +3699,7 @@ function calcomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("CALCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("CALCOM_CLIENT_SECRET"),
     scopes: config.scopes || ["READ_BOOKING", "WRITE_BOOKING", "READ_PROFILE", "WRITE_PROFILE"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.cal.com/v1",
@@ -3774,6 +3788,7 @@ function rampIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("RAMP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("RAMP_CLIENT_SECRET"),
     scopes: config.scopes || ["transactions:read", "cards:read", "users:read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.ramp.com/v1",
@@ -3818,6 +3833,7 @@ function onedriveIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ONEDRIVE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ONEDRIVE_CLIENT_SECRET"),
     scopes: config.scopes || ["Files.Read", "Files.ReadWrite", "offline_access"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3869,6 +3885,7 @@ function gworkspaceIntegration(config = {}) {
       "https://www.googleapis.com/auth/presentations",
       "https://www.googleapis.com/auth/drive.readonly"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3934,6 +3951,7 @@ function polarIntegration(config = {}) {
       "metrics:read",
       "organizations:read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.polar.sh"
@@ -4003,6 +4021,7 @@ function figmaIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("FIGMA_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("FIGMA_CLIENT_SECRET"),
     scopes: config.scopes || ["files:read", "file_comments:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -4046,6 +4065,7 @@ function intercomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("INTERCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("INTERCOM_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -4099,6 +4119,7 @@ function hubspotIntegration(config = {}) {
       "crm.objects.tickets.write",
       "crm.objects.owners.read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -4161,6 +4182,7 @@ function youtubeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("YOUTUBE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("YOUTUBE_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/youtube.readonly"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -4238,6 +4260,7 @@ function genericOAuthIntegration(config) {
     clientId: config.clientId ?? getEnv(`${providerUpper}_CLIENT_ID`),
     clientSecret: config.clientSecret ?? getEnv(`${providerUpper}_CLIENT_SECRET`),
     scopes: config.scopes,
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -10940,6 +10963,7 @@ function createMCPServer(config) {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }));
       return Response.json({ integrations });
@@ -11903,6 +11927,7 @@ class OAuthHandler {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }))
     };
@@ -11945,6 +11970,10 @@ class OAuthHandler {
     if (scopes.length > 0) {
       url.searchParams.set("scope", scopes.join(","));
     }
+    const optionalScopes = authorizeRequest.optionalScopes || providerConfig.optionalScopes || [];
+    if (optionalScopes.length > 0) {
+      url.searchParams.set("optional_scope", optionalScopes.join(","));
+    }
     url.searchParams.set("state", authorizeRequest.state);
     url.searchParams.set("code_challenge", authorizeRequest.codeChallenge);
     url.searchParams.set("code_challenge_method", authorizeRequest.codeChallengeMethod);
@@ -11956,10 +11985,12 @@ class OAuthHandler {
       "clientId",
       "clientSecret",
       "scopes",
+      "optionalScopes",
       "redirectUri",
       "client_id",
       "client_secret",
       "scope",
+      "optional_scope",
       "redirect_uri",
       "provider"
     ]);

package/dist/oauth.js

@@ -2842,6 +2842,7 @@ function githubIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GITHUB_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GITHUB_CLIENT_SECRET"),
     scopes: config.scopes || ["repo", "user"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.github.com",
@@ -2929,6 +2930,7 @@ function gmailIntegration(config = {}) {
       "https://www.googleapis.com/auth/gmail.modify",
       "https://www.googleapis.com/auth/gmail.labels"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -2965,6 +2967,7 @@ function notionIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("NOTION_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("NOTION_CLIENT_SECRET"),
     scopes: [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       owner: config.owner || "user",
@@ -3030,6 +3033,7 @@ function slackIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("SLACK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("SLACK_CLIENT_SECRET"),
     scopes: config.scopes || ["chat:write", "channels:read", "users:read", "search:read", "files:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3073,6 +3077,7 @@ function linearIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("LINEAR_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("LINEAR_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write", "issues:create", "comments:create"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3140,6 +3145,7 @@ function vercelIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("VERCEL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("VERCEL_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3183,6 +3189,7 @@ function zendeskIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ZENDESK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ZENDESK_CLIENT_SECRET"),
     scopes: config.scopes || ["read", "write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       subdomain: config.subdomain ?? getEnv("ZENDESK_SUBDOMAIN"),
@@ -3227,6 +3234,7 @@ function stripeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("STRIPE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("STRIPE_CLIENT_SECRET"),
     scopes: config.scopes || ["read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3270,6 +3278,7 @@ function gcalIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("GCAL_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("GCAL_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/calendar"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3313,6 +3322,7 @@ function outlookIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("OUTLOOK_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("OUTLOOK_CLIENT_SECRET"),
     scopes: config.scopes || ["Mail.Read", "Mail.Send", "Calendars.ReadWrite", "Contacts.Read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3364,6 +3374,7 @@ function airtableIntegration(config = {}) {
       "schema.bases:write",
       "webhook:manage"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3422,6 +3433,7 @@ function todoistIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("TODOIST_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("TODOIST_CLIENT_SECRET"),
     scopes: config.scopes || ["data:read_write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3465,6 +3477,7 @@ function whatsappIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("WHATSAPP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("WHATSAPP_CLIENT_SECRET"),
     scopes: config.scopes || ["business_management", "whatsapp_business_messaging", "whatsapp_business_management"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       businessAccountId: config.businessAccountId,
@@ -3508,6 +3521,7 @@ function calcomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("CALCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("CALCOM_CLIENT_SECRET"),
     scopes: config.scopes || ["READ_BOOKING", "WRITE_BOOKING", "READ_PROFILE", "WRITE_PROFILE"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.cal.com/v1",
@@ -3596,6 +3610,7 @@ function rampIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("RAMP_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("RAMP_CLIENT_SECRET"),
     scopes: config.scopes || ["transactions:read", "cards:read", "users:read"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.ramp.com/v1",
@@ -3640,6 +3655,7 @@ function onedriveIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("ONEDRIVE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("ONEDRIVE_CLIENT_SECRET"),
     scopes: config.scopes || ["Files.Read", "Files.ReadWrite", "offline_access"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3691,6 +3707,7 @@ function gworkspaceIntegration(config = {}) {
       "https://www.googleapis.com/auth/presentations",
       "https://www.googleapis.com/auth/drive.readonly"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3756,6 +3773,7 @@ function polarIntegration(config = {}) {
       "metrics:read",
       "organizations:read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       apiBaseUrl: config.apiBaseUrl || "https://api.polar.sh"
@@ -3825,6 +3843,7 @@ function figmaIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("FIGMA_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("FIGMA_CLIENT_SECRET"),
     scopes: config.scopes || ["files:read", "file_comments:write"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3868,6 +3887,7 @@ function intercomIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("INTERCOM_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("INTERCOM_CLIENT_SECRET"),
     scopes: config.scopes || [],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3921,6 +3941,7 @@ function hubspotIntegration(config = {}) {
       "crm.objects.tickets.write",
       "crm.objects.owners.read"
     ],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -3983,6 +4004,7 @@ function youtubeIntegration(config = {}) {
     clientId: config.clientId ?? getEnv("YOUTUBE_CLIENT_ID"),
     clientSecret: config.clientSecret ?? getEnv("YOUTUBE_CLIENT_SECRET"),
     scopes: config.scopes || ["https://www.googleapis.com/auth/youtube.readonly"],
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config: {
       ...config
@@ -4060,6 +4082,7 @@ function genericOAuthIntegration(config) {
     clientId: config.clientId ?? getEnv(`${providerUpper}_CLIENT_ID`),
     clientSecret: config.clientSecret ?? getEnv(`${providerUpper}_CLIENT_SECRET`),
     scopes: config.scopes,
+    optionalScopes: config.optionalScopes,
     redirectUri: config.redirectUri,
     config
   };
@@ -10774,6 +10797,7 @@ function createMCPServer(config) {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }));
       return Response.json({ integrations });
@@ -11737,6 +11761,7 @@ class OAuthHandler {
         tools: integration.tools,
         hasOAuth: !!integration.oauth,
         scopes: integration.oauth?.scopes,
+        optionalScopes: integration.oauth?.optionalScopes,
         provider: integration.oauth?.provider
       }))
     };
@@ -11779,6 +11804,10 @@ class OAuthHandler {
     if (scopes.length > 0) {
       url.searchParams.set("scope", scopes.join(","));
     }
+    const optionalScopes = authorizeRequest.optionalScopes || providerConfig.optionalScopes || [];
+    if (optionalScopes.length > 0) {
+      url.searchParams.set("optional_scope", optionalScopes.join(","));
+    }
     url.searchParams.set("state", authorizeRequest.state);
     url.searchParams.set("code_challenge", authorizeRequest.codeChallenge);
     url.searchParams.set("code_challenge_method", authorizeRequest.codeChallengeMethod);
@@ -11790,10 +11819,12 @@ class OAuthHandler {
       "clientId",
       "clientSecret",
       "scopes",
+      "optionalScopes",
       "redirectUri",
       "client_id",
       "client_secret",
       "scope",
+      "optional_scope",
       "redirect_uri",
       "provider"
     ]);