diff --git a/internal/server/mocks.go b/internal/server/mocks.go
index 9acc711a01d5..312cdad6445f 100644
--- a/internal/server/mocks.go
+++ b/internal/server/mocks.go
@@ -116,6 +116,10 @@ func (t MockTool) GetAuthTokenHeaderName(tools.SourceProvider) (string, error) {
 	return "Authorization", nil
 }
 
+func (t MockTool) GetScopesRequired() []string {
+	return nil
+}
+
 // MockPrompt is used to mock prompts in tests
 type MockPrompt struct {
 	Name        string
diff --git a/internal/tools/alloydb/alloydbcreatecluster/alloydbcreatecluster.go b/internal/tools/alloydb/alloydbcreatecluster/alloydbcreatecluster.go
index 7aafadb8b036..7a1dab623499 100644
--- a/internal/tools/alloydb/alloydbcreatecluster/alloydbcreatecluster.go
+++ b/internal/tools/alloydb/alloydbcreatecluster/alloydbcreatecluster.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -206,3 +208,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbcreateinstance/alloydbcreateinstance.go b/internal/tools/alloydb/alloydbcreateinstance/alloydbcreateinstance.go
index 97d6b9d717ed..67d765c4827b 100644
--- a/internal/tools/alloydb/alloydbcreateinstance/alloydbcreateinstance.go
+++ b/internal/tools/alloydb/alloydbcreateinstance/alloydbcreateinstance.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -211,3 +213,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbcreateuser/alloydbcreateuser.go b/internal/tools/alloydb/alloydbcreateuser/alloydbcreateuser.go
index c3046aca9ce4..401cc363ff44 100644
--- a/internal/tools/alloydb/alloydbcreateuser/alloydbcreateuser.go
+++ b/internal/tools/alloydb/alloydbcreateuser/alloydbcreateuser.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -216,3 +218,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbgetcluster/alloydbgetcluster.go b/internal/tools/alloydb/alloydbgetcluster/alloydbgetcluster.go
index 4e92f85a99a7..5ebdce9f6a06 100644
--- a/internal/tools/alloydb/alloydbgetcluster/alloydbgetcluster.go
+++ b/internal/tools/alloydb/alloydbgetcluster/alloydbgetcluster.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -187,3 +189,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbgetinstance/alloydbgetinstance.go b/internal/tools/alloydb/alloydbgetinstance/alloydbgetinstance.go
index 039e0bcca25e..e448417a2d6a 100644
--- a/internal/tools/alloydb/alloydbgetinstance/alloydbgetinstance.go
+++ b/internal/tools/alloydb/alloydbgetinstance/alloydbgetinstance.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -191,3 +193,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbgetuser/alloydbgetuser.go b/internal/tools/alloydb/alloydbgetuser/alloydbgetuser.go
index 918ade8c5376..3aa2a8144d5a 100644
--- a/internal/tools/alloydb/alloydbgetuser/alloydbgetuser.go
+++ b/internal/tools/alloydb/alloydbgetuser/alloydbgetuser.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -191,3 +193,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydblistclusters/alloydblistclusters.go b/internal/tools/alloydb/alloydblistclusters/alloydblistclusters.go
index 1fcb50eab6de..cb172f07aac0 100644
--- a/internal/tools/alloydb/alloydblistclusters/alloydblistclusters.go
+++ b/internal/tools/alloydb/alloydblistclusters/alloydblistclusters.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -181,3 +183,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydblistinstances/alloydblistinstances.go b/internal/tools/alloydb/alloydblistinstances/alloydblistinstances.go
index 315c29a3f44a..65216ee9422b 100644
--- a/internal/tools/alloydb/alloydblistinstances/alloydblistinstances.go
+++ b/internal/tools/alloydb/alloydblistinstances/alloydblistinstances.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -186,3 +188,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydblistusers/alloydblistusers.go b/internal/tools/alloydb/alloydblistusers/alloydblistusers.go
index 16c47731201f..56cc86ad3792 100644
--- a/internal/tools/alloydb/alloydblistusers/alloydblistusers.go
+++ b/internal/tools/alloydb/alloydblistusers/alloydblistusers.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	BaseURL      string                 `yaml:"baseURL"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -186,3 +188,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydb/alloydbwaitforoperation/alloydbwaitforoperation.go b/internal/tools/alloydb/alloydbwaitforoperation/alloydbwaitforoperation.go
index 63cdb5a204ed..fb32e016b09b 100644
--- a/internal/tools/alloydb/alloydbwaitforoperation/alloydbwaitforoperation.go
+++ b/internal/tools/alloydb/alloydbwaitforoperation/alloydbwaitforoperation.go
@@ -107,6 +107,8 @@ type Config struct {
 	Multiplier  float64                `yaml:"multiplier"`
 	MaxRetries  int                    `yaml:"maxRetries"`
 	Annotations *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -306,3 +308,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/alloydbainl/alloydbainl.go b/internal/tools/alloydbainl/alloydbainl.go
index 20d0eebbabc3..b799d3e401c2 100644
--- a/internal/tools/alloydbainl/alloydbainl.go
+++ b/internal/tools/alloydbainl/alloydbainl.go
@@ -59,6 +59,8 @@ type Config struct {
 	AuthRequired       []string               `yaml:"authRequired"`
 	NLConfigParameters parameters.Parameters  `yaml:"nlConfigParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -179,3 +181,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigqueryanalyzecontribution/bigqueryanalyzecontribution.go b/internal/tools/bigquery/bigqueryanalyzecontribution/bigqueryanalyzecontribution.go
index bde33415d947..12c1436ec1cf 100644
--- a/internal/tools/bigquery/bigqueryanalyzecontribution/bigqueryanalyzecontribution.go
+++ b/internal/tools/bigquery/bigqueryanalyzecontribution/bigqueryanalyzecontribution.go
@@ -67,6 +67,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -353,3 +355,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigqueryconversationalanalytics/bigqueryconversationalanalytics.go b/internal/tools/bigquery/bigqueryconversationalanalytics/bigqueryconversationalanalytics.go
index c5cfa20dcee8..68cdbf5bd4ba 100644
--- a/internal/tools/bigquery/bigqueryconversationalanalytics/bigqueryconversationalanalytics.go
+++ b/internal/tools/bigquery/bigqueryconversationalanalytics/bigqueryconversationalanalytics.go
@@ -116,6 +116,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -468,3 +470,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigqueryexecutesql/bigqueryexecutesql.go b/internal/tools/bigquery/bigqueryexecutesql/bigqueryexecutesql.go
index 4fdc89908835..464c7c2e65d7 100644
--- a/internal/tools/bigquery/bigqueryexecutesql/bigqueryexecutesql.go
+++ b/internal/tools/bigquery/bigqueryexecutesql/bigqueryexecutesql.go
@@ -68,6 +68,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -324,3 +326,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigqueryforecast/bigqueryforecast.go b/internal/tools/bigquery/bigqueryforecast/bigqueryforecast.go
index 38c89fe93bb5..fab97bfd1e72 100644
--- a/internal/tools/bigquery/bigqueryforecast/bigqueryforecast.go
+++ b/internal/tools/bigquery/bigqueryforecast/bigqueryforecast.go
@@ -66,6 +66,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -314,3 +316,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerygetdatasetinfo/bigquerygetdatasetinfo.go b/internal/tools/bigquery/bigquerygetdatasetinfo/bigquerygetdatasetinfo.go
index a8c5545af914..8b7556eeea9d 100644
--- a/internal/tools/bigquery/bigquerygetdatasetinfo/bigquerygetdatasetinfo.go
+++ b/internal/tools/bigquery/bigquerygetdatasetinfo/bigquerygetdatasetinfo.go
@@ -64,6 +64,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -197,3 +199,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerygettableinfo/bigquerygettableinfo.go b/internal/tools/bigquery/bigquerygettableinfo/bigquerygettableinfo.go
index 8298eff35b2c..8f4abdafed59 100644
--- a/internal/tools/bigquery/bigquerygettableinfo/bigquerygettableinfo.go
+++ b/internal/tools/bigquery/bigquerygettableinfo/bigquerygettableinfo.go
@@ -65,6 +65,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -207,3 +209,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerylistdatasetids/bigquerylistdatasetids.go b/internal/tools/bigquery/bigquerylistdatasetids/bigquerylistdatasetids.go
index 7ac64d1df671..3bea45e7782e 100644
--- a/internal/tools/bigquery/bigquerylistdatasetids/bigquerylistdatasetids.go
+++ b/internal/tools/bigquery/bigquerylistdatasetids/bigquerylistdatasetids.go
@@ -62,6 +62,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -203,3 +205,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerylisttableids/bigquerylisttableids.go b/internal/tools/bigquery/bigquerylisttableids/bigquerylisttableids.go
index 0f6da3196f81..df76bbd3b648 100644
--- a/internal/tools/bigquery/bigquerylisttableids/bigquerylisttableids.go
+++ b/internal/tools/bigquery/bigquerylisttableids/bigquerylisttableids.go
@@ -65,6 +65,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -213,3 +215,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerysearchcatalog/bigquerysearchcatalog.go b/internal/tools/bigquery/bigquerysearchcatalog/bigquerysearchcatalog.go
index 45a8fe8fc48c..276ecc009f77 100644
--- a/internal/tools/bigquery/bigquerysearchcatalog/bigquerysearchcatalog.go
+++ b/internal/tools/bigquery/bigquerysearchcatalog/bigquerysearchcatalog.go
@@ -62,6 +62,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -291,3 +293,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigquery/bigquerysql/bigquerysql.go b/internal/tools/bigquery/bigquerysql/bigquerysql.go
index 58c8cd40c49a..e203e32a5118 100644
--- a/internal/tools/bigquery/bigquerysql/bigquerysql.go
+++ b/internal/tools/bigquery/bigquerysql/bigquerysql.go
@@ -68,6 +68,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -286,3 +288,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/bigtable/bigtable.go b/internal/tools/bigtable/bigtable.go
index 91145b431167..17ac257cec80 100644
--- a/internal/tools/bigtable/bigtable.go
+++ b/internal/tools/bigtable/bigtable.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -151,3 +153,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cassandra/cassandracql/cassandracql.go b/internal/tools/cassandra/cassandracql/cassandracql.go
index 6d8a30dcc4d0..8d741c5941f7 100644
--- a/internal/tools/cassandra/cassandracql/cassandracql.go
+++ b/internal/tools/cassandra/cassandracql/cassandracql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/clickhouse/clickhouseexecutesql/clickhouseexecutesql.go b/internal/tools/clickhouse/clickhouseexecutesql/clickhouseexecutesql.go
index ecbf65880926..6f95ac194588 100644
--- a/internal/tools/clickhouse/clickhouseexecutesql/clickhouseexecutesql.go
+++ b/internal/tools/clickhouse/clickhouseexecutesql/clickhouseexecutesql.go
@@ -54,6 +54,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -136,3 +138,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/clickhouse/clickhouselistdatabases/clickhouselistdatabases.go b/internal/tools/clickhouse/clickhouselistdatabases/clickhouselistdatabases.go
index f5d40613a577..b3a6f0579ec9 100644
--- a/internal/tools/clickhouse/clickhouselistdatabases/clickhouselistdatabases.go
+++ b/internal/tools/clickhouse/clickhouselistdatabases/clickhouselistdatabases.go
@@ -55,6 +55,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -134,3 +136,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/clickhouse/clickhouselisttables/clickhouselisttables.go b/internal/tools/clickhouse/clickhouselisttables/clickhouselisttables.go
index 586d675e3fa7..bb75074fa9b6 100644
--- a/internal/tools/clickhouse/clickhouselisttables/clickhouselisttables.go
+++ b/internal/tools/clickhouse/clickhouselisttables/clickhouselisttables.go
@@ -56,6 +56,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -159,3 +161,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/clickhouse/clickhousesql/clickhousesql.go b/internal/tools/clickhouse/clickhousesql/clickhousesql.go
index ead727503107..5954b0982db8 100644
--- a/internal/tools/clickhouse/clickhousesql/clickhousesql.go
+++ b/internal/tools/clickhouse/clickhousesql/clickhousesql.go
@@ -57,6 +57,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -143,3 +145,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudgda/cloudgda.go b/internal/tools/cloudgda/cloudgda.go
index 811d1b9f3b06..99a5cd4e4c0f 100644
--- a/internal/tools/cloudgda/cloudgda.go
+++ b/internal/tools/cloudgda/cloudgda.go
@@ -119,6 +119,8 @@ type Config struct {
 	GenerationOptions *GenerationOptions     `yaml:"generationOptions,omitempty"`
 	AuthRequired      []string               `yaml:"authRequired"`
 	Annotations       *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -245,3 +247,7 @@ func (t Tool) GetAuthTokenHeaderName(_ tools.SourceProvider) (string, error) {
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcarefhirfetchpage/cloudhealthcarefhirfetchpage.go b/internal/tools/cloudhealthcare/cloudhealthcarefhirfetchpage/cloudhealthcarefhirfetchpage.go
index c58f96df04d3..f76d259d0ec5 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcarefhirfetchpage/cloudhealthcarefhirfetchpage.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcarefhirfetchpage/cloudhealthcarefhirfetchpage.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -155,3 +157,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcarefhirpatienteverything/cloudhealthcarefhirpatienteverything.go b/internal/tools/cloudhealthcare/cloudhealthcarefhirpatienteverything/cloudhealthcarefhirpatienteverything.go
index 8ec9147cd437..258772cde0de 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcarefhirpatienteverything/cloudhealthcarefhirpatienteverything.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcarefhirpatienteverything/cloudhealthcarefhirpatienteverything.go
@@ -64,6 +64,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -206,3 +208,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcarefhirpatientsearch/cloudhealthcarefhirpatientsearch.go b/internal/tools/cloudhealthcare/cloudhealthcarefhirpatientsearch/cloudhealthcarefhirpatientsearch.go
index 637293e16c75..e55cf786376b 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcarefhirpatientsearch/cloudhealthcarefhirpatientsearch.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcarefhirpatientsearch/cloudhealthcarefhirpatientsearch.go
@@ -80,6 +80,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -277,3 +279,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetdataset/cloudhealthcaregetdataset.go b/internal/tools/cloudhealthcare/cloudhealthcaregetdataset/cloudhealthcaregetdataset.go
index c849bb67063f..a38c12dffe2c 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetdataset/cloudhealthcaregetdataset.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetdataset/cloudhealthcaregetdataset.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstore/cloudhealthcaregetdicomstore.go b/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstore/cloudhealthcaregetdicomstore.go
index 36fd60edcf9b..3a6bca2effc0 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstore/cloudhealthcaregetdicomstore.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstore/cloudhealthcaregetdicomstore.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstoremetrics/cloudhealthcaregetdicomstoremetrics.go b/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstoremetrics/cloudhealthcaregetdicomstoremetrics.go
index 7eded9237c0c..b8d00b66301c 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstoremetrics/cloudhealthcaregetdicomstoremetrics.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetdicomstoremetrics/cloudhealthcaregetdicomstoremetrics.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirresource/cloudhealthcaregetfhirresource.go b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirresource/cloudhealthcaregetfhirresource.go
index aec350590126..e80eabf1c86c 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirresource/cloudhealthcaregetfhirresource.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirresource/cloudhealthcaregetfhirresource.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -179,3 +181,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstore/cloudhealthcaregetfhirstore.go b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstore/cloudhealthcaregetfhirstore.go
index 142df3f393fd..385a01c927da 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstore/cloudhealthcaregetfhirstore.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstore/cloudhealthcaregetfhirstore.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstoremetrics/cloudhealthcaregetfhirstoremetrics.go b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstoremetrics/cloudhealthcaregetfhirstoremetrics.go
index 26f4d4a38deb..fdc646b488d6 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstoremetrics/cloudhealthcaregetfhirstoremetrics.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaregetfhirstoremetrics/cloudhealthcaregetfhirstoremetrics.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcarelistdicomstores/cloudhealthcarelistdicomstores.go b/internal/tools/cloudhealthcare/cloudhealthcarelistdicomstores/cloudhealthcarelistdicomstores.go
index 1e42d8b76afb..ca4ac4014c13 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcarelistdicomstores/cloudhealthcarelistdicomstores.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcarelistdicomstores/cloudhealthcarelistdicomstores.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcarelistfhirstores/cloudhealthcarelistfhirstores.go b/internal/tools/cloudhealthcare/cloudhealthcarelistfhirstores/cloudhealthcarelistfhirstores.go
index 49b7bbe353f0..0a027006efa1 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcarelistfhirstores/cloudhealthcarelistfhirstores.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcarelistfhirstores/cloudhealthcarelistfhirstores.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcareretrieverendereddicominstance/cloudhealthcareretrieverendereddicominstance.go b/internal/tools/cloudhealthcare/cloudhealthcareretrieverendereddicominstance/cloudhealthcareretrieverendereddicominstance.go
index 6d197c0f5f22..a9a2c7be776b 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcareretrieverendereddicominstance/cloudhealthcareretrieverendereddicominstance.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcareretrieverendereddicominstance/cloudhealthcareretrieverendereddicominstance.go
@@ -63,6 +63,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -192,3 +194,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicominstances/cloudhealthcaresearchdicominstances.go b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicominstances/cloudhealthcaresearchdicominstances.go
index d8e48a6fb41f..674ecc380c28 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicominstances/cloudhealthcaresearchdicominstances.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicominstances/cloudhealthcaresearchdicominstances.go
@@ -70,6 +70,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -218,3 +220,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomseries/cloudhealthcaresearchdicomseries.go b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomseries/cloudhealthcaresearchdicomseries.go
index b9a850f1d222..caddc4b0e2c4 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomseries/cloudhealthcaresearchdicomseries.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomseries/cloudhealthcaresearchdicomseries.go
@@ -68,6 +68,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -203,3 +205,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomstudies/cloudhealthcaresearchdicomstudies.go b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomstudies/cloudhealthcaresearchdicomstudies.go
index d628f46f08b0..b930224591d9 100644
--- a/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomstudies/cloudhealthcaresearchdicomstudies.go
+++ b/internal/tools/cloudhealthcare/cloudhealthcaresearchdicomstudies/cloudhealthcaresearchdicomstudies.go
@@ -66,6 +66,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -187,3 +189,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudloggingadmin/cloudloggingadminlistlognames/cloudloggingadminlistlognames.go b/internal/tools/cloudloggingadmin/cloudloggingadminlistlognames/cloudloggingadminlistlognames.go
index c957e64176a0..a5be26132c99 100644
--- a/internal/tools/cloudloggingadmin/cloudloggingadminlistlognames/cloudloggingadminlistlognames.go
+++ b/internal/tools/cloudloggingadmin/cloudloggingadminlistlognames/cloudloggingadminlistlognames.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -161,3 +163,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudloggingadmin/cloudloggingadminlistresourcetypes/cloudloggingadminlistresourcetypes.go b/internal/tools/cloudloggingadmin/cloudloggingadminlistresourcetypes/cloudloggingadminlistresourcetypes.go
index b67c78adf2f9..7fa01227cb68 100644
--- a/internal/tools/cloudloggingadmin/cloudloggingadminlistresourcetypes/cloudloggingadminlistresourcetypes.go
+++ b/internal/tools/cloudloggingadmin/cloudloggingadminlistresourcetypes/cloudloggingadminlistresourcetypes.go
@@ -54,6 +54,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -148,3 +150,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudloggingadmin/cloudloggingadminquerylogs/cloudloggingadminquerylogs.go b/internal/tools/cloudloggingadmin/cloudloggingadminquerylogs/cloudloggingadminquerylogs.go
index 38893583bcdf..cd9798320bda 100644
--- a/internal/tools/cloudloggingadmin/cloudloggingadminquerylogs/cloudloggingadminquerylogs.go
+++ b/internal/tools/cloudloggingadmin/cloudloggingadminquerylogs/cloudloggingadminquerylogs.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -221,3 +223,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudmonitoring/cloudmonitoring.go b/internal/tools/cloudmonitoring/cloudmonitoring.go
index b9a223c447f4..5e680d6bfed6 100644
--- a/internal/tools/cloudmonitoring/cloudmonitoring.go
+++ b/internal/tools/cloudmonitoring/cloudmonitoring.go
@@ -55,6 +55,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -145,3 +147,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlcloneinstance/cloudsqlcloneinstance.go b/internal/tools/cloudsql/cloudsqlcloneinstance/cloudsqlcloneinstance.go
index a507c920d229..c8f051fc34a2 100644
--- a/internal/tools/cloudsql/cloudsqlcloneinstance/cloudsqlcloneinstance.go
+++ b/internal/tools/cloudsql/cloudsqlcloneinstance/cloudsqlcloneinstance.go
@@ -59,6 +59,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -194,3 +196,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlcreatebackup/cloudsqlcreatebackup.go b/internal/tools/cloudsql/cloudsqlcreatebackup/cloudsqlcreatebackup.go
index 52e465db2579..32b47855707d 100644
--- a/internal/tools/cloudsql/cloudsqlcreatebackup/cloudsqlcreatebackup.go
+++ b/internal/tools/cloudsql/cloudsqlcreatebackup/cloudsqlcreatebackup.go
@@ -47,6 +47,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 func init() {
@@ -185,3 +187,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlcreatedatabase/cloudsqlcreatedatabase.go b/internal/tools/cloudsql/cloudsqlcreatedatabase/cloudsqlcreatedatabase.go
index 61209639f4e0..a9ab45373cf6 100644
--- a/internal/tools/cloudsql/cloudsqlcreatedatabase/cloudsqlcreatedatabase.go
+++ b/internal/tools/cloudsql/cloudsqlcreatedatabase/cloudsqlcreatedatabase.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -182,3 +184,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlcreateusers/cloudsqlcreateusers.go b/internal/tools/cloudsql/cloudsqlcreateusers/cloudsqlcreateusers.go
index 6be859f6d825..209fdb8eac9c 100644
--- a/internal/tools/cloudsql/cloudsqlcreateusers/cloudsqlcreateusers.go
+++ b/internal/tools/cloudsql/cloudsqlcreateusers/cloudsqlcreateusers.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -191,3 +193,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlgetinstances/cloudsqlgetinstances.go b/internal/tools/cloudsql/cloudsqlgetinstances/cloudsqlgetinstances.go
index 027dcf491821..7dcea81d09c7 100644
--- a/internal/tools/cloudsql/cloudsqlgetinstances/cloudsqlgetinstances.go
+++ b/internal/tools/cloudsql/cloudsqlgetinstances/cloudsqlgetinstances.go
@@ -57,6 +57,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqllistdatabases/cloudsqllistdatabases.go b/internal/tools/cloudsql/cloudsqllistdatabases/cloudsqllistdatabases.go
index d037489ef9a8..0f8f0570f8ae 100644
--- a/internal/tools/cloudsql/cloudsqllistdatabases/cloudsqllistdatabases.go
+++ b/internal/tools/cloudsql/cloudsqllistdatabases/cloudsqllistdatabases.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqllistinstances/cloudsqllistinstances.go b/internal/tools/cloudsql/cloudsqllistinstances/cloudsqllistinstances.go
index 88db755f7801..aa20d9daed64 100644
--- a/internal/tools/cloudsql/cloudsqllistinstances/cloudsqllistinstances.go
+++ b/internal/tools/cloudsql/cloudsqllistinstances/cloudsqllistinstances.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -172,3 +174,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlrestorebackup/cloudsqlrestorebackup.go b/internal/tools/cloudsql/cloudsqlrestorebackup/cloudsqlrestorebackup.go
index a37d572291f4..ac25eebc7a77 100644
--- a/internal/tools/cloudsql/cloudsqlrestorebackup/cloudsqlrestorebackup.go
+++ b/internal/tools/cloudsql/cloudsqlrestorebackup/cloudsqlrestorebackup.go
@@ -47,6 +47,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 func init() {
@@ -188,3 +190,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsql/cloudsqlwaitforoperation/cloudsqlwaitforoperation.go b/internal/tools/cloudsql/cloudsqlwaitforoperation/cloudsqlwaitforoperation.go
index b32457edad61..9899edac006e 100644
--- a/internal/tools/cloudsql/cloudsqlwaitforoperation/cloudsqlwaitforoperation.go
+++ b/internal/tools/cloudsql/cloudsqlwaitforoperation/cloudsqlwaitforoperation.go
@@ -108,6 +108,8 @@ type Config struct {
 	Multiplier  float64                `yaml:"multiplier"`
 	MaxRetries  int                    `yaml:"maxRetries"`
 	Annotations *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -303,3 +305,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlmssql/cloudsqlmssqlcreateinstance/cloudsqlmssqlcreateinstance.go b/internal/tools/cloudsqlmssql/cloudsqlmssqlcreateinstance/cloudsqlmssqlcreateinstance.go
index 1bc7f4decf7b..3870fb1b7b9b 100644
--- a/internal/tools/cloudsqlmssql/cloudsqlmssqlcreateinstance/cloudsqlmssqlcreateinstance.go
+++ b/internal/tools/cloudsqlmssql/cloudsqlmssqlcreateinstance/cloudsqlmssqlcreateinstance.go
@@ -59,6 +59,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -211,3 +213,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlmysql/cloudsqlmysqlcreateinstance/cloudsqlmysqlcreateinstance.go b/internal/tools/cloudsqlmysql/cloudsqlmysqlcreateinstance/cloudsqlmysqlcreateinstance.go
index d4d128980c51..29932f0010f8 100644
--- a/internal/tools/cloudsqlmysql/cloudsqlmysqlcreateinstance/cloudsqlmysqlcreateinstance.go
+++ b/internal/tools/cloudsqlmysql/cloudsqlmysqlcreateinstance/cloudsqlmysqlcreateinstance.go
@@ -59,6 +59,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -213,3 +215,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/cloudsqlpgcreateinstances/cloudsqlpgcreateinstances.go b/internal/tools/cloudsqlpg/cloudsqlpgcreateinstances/cloudsqlpgcreateinstances.go
index e4d7f72ab6f6..eb25fa5d7486 100644
--- a/internal/tools/cloudsqlpg/cloudsqlpgcreateinstances/cloudsqlpgcreateinstances.go
+++ b/internal/tools/cloudsqlpg/cloudsqlpgcreateinstances/cloudsqlpgcreateinstances.go
@@ -59,6 +59,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -212,3 +214,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/cloudsqlpgupgradeprecheck/cloudsqlpgupgradeprecheck.go b/internal/tools/cloudsqlpg/cloudsqlpgupgradeprecheck/cloudsqlpgupgradeprecheck.go
index 3c7f2da65003..aa5dd1a0a8b4 100644
--- a/internal/tools/cloudsqlpg/cloudsqlpgupgradeprecheck/cloudsqlpgupgradeprecheck.go
+++ b/internal/tools/cloudsqlpg/cloudsqlpgupgradeprecheck/cloudsqlpgupgradeprecheck.go
@@ -58,6 +58,8 @@ type Config struct {
 	Source       string                 `yaml:"source" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -244,3 +246,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/vectorassistapplyspec/vectorassistapplyspec.go b/internal/tools/cloudsqlpg/vectorassistapplyspec/vectorassistapplyspec.go
index f1e34b8e6acd..a49a84560601 100644
--- a/internal/tools/cloudsqlpg/vectorassistapplyspec/vectorassistapplyspec.go
+++ b/internal/tools/cloudsqlpg/vectorassistapplyspec/vectorassistapplyspec.go
@@ -61,6 +61,8 @@ type Config struct {
 	Source       string   `yaml:"source" validate:"required"`
 	Description  string   `yaml:"description"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -158,3 +160,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/vectorassistdefinespec/vectorassistdefinespec.go b/internal/tools/cloudsqlpg/vectorassistdefinespec/vectorassistdefinespec.go
index 5c56090a9a71..e4a576c7ca89 100644
--- a/internal/tools/cloudsqlpg/vectorassistdefinespec/vectorassistdefinespec.go
+++ b/internal/tools/cloudsqlpg/vectorassistdefinespec/vectorassistdefinespec.go
@@ -68,6 +68,8 @@ type Config struct {
 	Source       string   `yaml:"source" validate:"required"`
 	Description  string   `yaml:"description"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/vectorassistgeneratequery/vectorassistgeneratequery.go b/internal/tools/cloudsqlpg/vectorassistgeneratequery/vectorassistgeneratequery.go
index 13842b8453dd..b27fa367a258 100644
--- a/internal/tools/cloudsqlpg/vectorassistgeneratequery/vectorassistgeneratequery.go
+++ b/internal/tools/cloudsqlpg/vectorassistgeneratequery/vectorassistgeneratequery.go
@@ -69,6 +69,8 @@ type Config struct {
 	Source       string   `yaml:"source" validate:"required"`
 	Description  string   `yaml:"description"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -173,3 +175,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cloudsqlpg/vectorassistmodifyspec/vectorassistmodifyspec.go b/internal/tools/cloudsqlpg/vectorassistmodifyspec/vectorassistmodifyspec.go
index 3ddd49238b98..a9e47344ef25 100644
--- a/internal/tools/cloudsqlpg/vectorassistmodifyspec/vectorassistmodifyspec.go
+++ b/internal/tools/cloudsqlpg/vectorassistmodifyspec/vectorassistmodifyspec.go
@@ -68,6 +68,8 @@ type Config struct {
 	Source       string   `yaml:"source" validate:"required"`
 	Description  string   `yaml:"description"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cockroachdb/cockroachdbexecutesql/cockroachdbexecutesql.go b/internal/tools/cockroachdb/cockroachdbexecutesql/cockroachdbexecutesql.go
index 63f617691a16..e0353b3b496c 100644
--- a/internal/tools/cockroachdb/cockroachdbexecutesql/cockroachdbexecutesql.go
+++ b/internal/tools/cockroachdb/cockroachdbexecutesql/cockroachdbexecutesql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -180,3 +182,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cockroachdb/cockroachdblistschemas/cockroachdblistschemas.go b/internal/tools/cockroachdb/cockroachdblistschemas/cockroachdblistschemas.go
index edd486a9b5b9..fe5fd8ceceef 100644
--- a/internal/tools/cockroachdb/cockroachdblistschemas/cockroachdblistschemas.go
+++ b/internal/tools/cockroachdb/cockroachdblistschemas/cockroachdblistschemas.go
@@ -72,6 +72,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -181,3 +183,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cockroachdb/cockroachdblisttables/cockroachdblisttables.go b/internal/tools/cockroachdb/cockroachdblisttables/cockroachdblisttables.go
index bb5f94ab73bf..9a7d78041d88 100644
--- a/internal/tools/cockroachdb/cockroachdblisttables/cockroachdblisttables.go
+++ b/internal/tools/cockroachdb/cockroachdblisttables/cockroachdblisttables.go
@@ -132,6 +132,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -255,3 +257,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/cockroachdb/cockroachdbsql/cockroachdbsql.go b/internal/tools/cockroachdb/cockroachdbsql/cockroachdbsql.go
index 3f8335750ec2..e528112a9ab0 100644
--- a/internal/tools/cockroachdb/cockroachdbsql/cockroachdbsql.go
+++ b/internal/tools/cockroachdb/cockroachdbsql/cockroachdbsql.go
@@ -64,6 +64,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -186,3 +188,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/conversationalanalytics/conversationalanalyticsaskdataagent/conversationalanalyticsaskdataagent.go b/internal/tools/conversationalanalytics/conversationalanalyticsaskdataagent/conversationalanalyticsaskdataagent.go
index f0610998ea76..d69bd9b1ddff 100644
--- a/internal/tools/conversationalanalytics/conversationalanalyticsaskdataagent/conversationalanalyticsaskdataagent.go
+++ b/internal/tools/conversationalanalytics/conversationalanalyticsaskdataagent/conversationalanalyticsaskdataagent.go
@@ -94,6 +94,8 @@ type Config struct {
 	Location     string   `yaml:"location"`
 	MaxResults   int      `yaml:"maxResults"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -416,3 +418,7 @@ func formatDataRetrieved(result map[string]any, maxRows int) map[string]any {
 		},
 	}
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/conversationalanalytics/conversationalanalyticsgetdataagentinfo/conversationalanalyticsgetdataagentinfo.go b/internal/tools/conversationalanalytics/conversationalanalyticsgetdataagentinfo/conversationalanalyticsgetdataagentinfo.go
index ab2fc2891fd0..045e40860319 100644
--- a/internal/tools/conversationalanalytics/conversationalanalyticsgetdataagentinfo/conversationalanalyticsgetdataagentinfo.go
+++ b/internal/tools/conversationalanalytics/conversationalanalyticsgetdataagentinfo/conversationalanalyticsgetdataagentinfo.go
@@ -66,6 +66,8 @@ type Config struct {
 	Description  string   `yaml:"description" validate:"required"`
 	Location     string   `yaml:"location"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -222,3 +224,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/conversationalanalytics/conversationalanalyticslistaccessibledataagents/conversationalanalyticslistaccessibledataagents.go b/internal/tools/conversationalanalytics/conversationalanalyticslistaccessibledataagents/conversationalanalyticslistaccessibledataagents.go
index 0a51da7a9ff1..efbfdb705164 100644
--- a/internal/tools/conversationalanalytics/conversationalanalyticslistaccessibledataagents/conversationalanalyticslistaccessibledataagents.go
+++ b/internal/tools/conversationalanalytics/conversationalanalyticslistaccessibledataagents/conversationalanalyticslistaccessibledataagents.go
@@ -65,6 +65,8 @@ type Config struct {
 	Description  string   `yaml:"description" validate:"required"`
 	Location     string   `yaml:"location"`
 	AuthRequired []string `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -216,3 +218,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/couchbase/couchbase.go b/internal/tools/couchbase/couchbase.go
index 3a6e9b4b11e4..19c96786551e 100644
--- a/internal/tools/couchbase/couchbase.go
+++ b/internal/tools/couchbase/couchbase.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -148,3 +150,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataform/dataformcompilelocal/dataformcompilelocal.go b/internal/tools/dataform/dataformcompilelocal/dataformcompilelocal.go
index 7c8cd2527c5a..d1eea9a0054f 100644
--- a/internal/tools/dataform/dataformcompilelocal/dataformcompilelocal.go
+++ b/internal/tools/dataform/dataformcompilelocal/dataformcompilelocal.go
@@ -50,6 +50,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -134,3 +136,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataplex/dataplexlookupcontext/dataplexlookupcontext.go b/internal/tools/dataplex/dataplexlookupcontext/dataplexlookupcontext.go
index 722a995170ef..f9e02ba7e271 100644
--- a/internal/tools/dataplex/dataplexlookupcontext/dataplexlookupcontext.go
+++ b/internal/tools/dataplex/dataplexlookupcontext/dataplexlookupcontext.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -176,3 +178,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataplex/dataplexlookupentry/dataplexlookupentry.go b/internal/tools/dataplex/dataplexlookupentry/dataplexlookupentry.go
index 033f298e446d..3550f073c6b2 100644
--- a/internal/tools/dataplex/dataplexlookupentry/dataplexlookupentry.go
+++ b/internal/tools/dataplex/dataplexlookupentry/dataplexlookupentry.go
@@ -57,6 +57,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataplex/dataplexsearchaspecttypes/dataplexsearchaspecttypes.go b/internal/tools/dataplex/dataplexsearchaspecttypes/dataplexsearchaspecttypes.go
index 852dfd28207c..f4c883ecc5dc 100644
--- a/internal/tools/dataplex/dataplexsearchaspecttypes/dataplexsearchaspecttypes.go
+++ b/internal/tools/dataplex/dataplexsearchaspecttypes/dataplexsearchaspecttypes.go
@@ -55,6 +55,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -151,3 +153,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataplex/dataplexsearchentries/dataplexsearchentries.go b/internal/tools/dataplex/dataplexsearchentries/dataplexsearchentries.go
index ac50ac3f7132..78faa448eec5 100644
--- a/internal/tools/dataplex/dataplexsearchentries/dataplexsearchentries.go
+++ b/internal/tools/dataplex/dataplexsearchentries/dataplexsearchentries.go
@@ -55,6 +55,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -160,3 +162,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataproc/dataprocgetcluster/dataprocgetcluster.go b/internal/tools/dataproc/dataprocgetcluster/dataprocgetcluster.go
index c87a8b6c8808..938a09774f83 100644
--- a/internal/tools/dataproc/dataprocgetcluster/dataprocgetcluster.go
+++ b/internal/tools/dataproc/dataprocgetcluster/dataprocgetcluster.go
@@ -52,6 +52,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataproc/dataprocgetjob/dataprocgetjob.go b/internal/tools/dataproc/dataprocgetjob/dataprocgetjob.go
index 50addb539dda..37f9b085629e 100644
--- a/internal/tools/dataproc/dataprocgetjob/dataprocgetjob.go
+++ b/internal/tools/dataproc/dataprocgetjob/dataprocgetjob.go
@@ -52,6 +52,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataproc/dataproclistclusters/dataproclistclusters.go b/internal/tools/dataproc/dataproclistclusters/dataproclistclusters.go
index 9ae759f32753..f6cf1c3318fa 100644
--- a/internal/tools/dataproc/dataproclistclusters/dataproclistclusters.go
+++ b/internal/tools/dataproc/dataproclistclusters/dataproclistclusters.go
@@ -51,6 +51,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -174,3 +176,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dataproc/dataproclistjobs/dataproclistjobs.go b/internal/tools/dataproc/dataproclistjobs/dataproclistjobs.go
index 71d62f70fa2f..ae98d0277289 100644
--- a/internal/tools/dataproc/dataproclistjobs/dataproclistjobs.go
+++ b/internal/tools/dataproc/dataproclistjobs/dataproclistjobs.go
@@ -51,6 +51,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -176,3 +178,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/dgraph/dgraph.go b/internal/tools/dgraph/dgraph.go
index 8d2aa8dd70d1..28bc24b36983 100644
--- a/internal/tools/dgraph/dgraph.go
+++ b/internal/tools/dgraph/dgraph.go
@@ -60,6 +60,8 @@ type Config struct {
 	Timeout      string                 `yaml:"timeout"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -134,3 +136,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/elasticsearch/elasticsearchesql/elasticsearchesql.go b/internal/tools/elasticsearch/elasticsearchesql/elasticsearchesql.go
index 7e4992ddf97f..fbaab06867f5 100644
--- a/internal/tools/elasticsearch/elasticsearchesql/elasticsearchesql.go
+++ b/internal/tools/elasticsearch/elasticsearchesql/elasticsearchesql.go
@@ -54,6 +54,8 @@ type Config struct {
 	Timeout      int                    `yaml:"timeout"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/elasticsearch/elasticsearchexecuteesql/elasticsearchexecuteesql.go b/internal/tools/elasticsearch/elasticsearchexecuteesql/elasticsearchexecuteesql.go
index 4e920603eb99..62c06e117738 100644
--- a/internal/tools/elasticsearch/elasticsearchexecuteesql/elasticsearchexecuteesql.go
+++ b/internal/tools/elasticsearch/elasticsearchexecuteesql/elasticsearchexecuteesql.go
@@ -57,6 +57,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Format       string                 `yaml:"format"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firebird/firebirdexecutesql/firebirdexecutesql.go b/internal/tools/firebird/firebirdexecutesql/firebirdexecutesql.go
index 160036b2f242..6f76f94f9be2 100644
--- a/internal/tools/firebird/firebirdexecutesql/firebirdexecutesql.go
+++ b/internal/tools/firebird/firebirdexecutesql/firebirdexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -146,3 +148,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firebird/firebirdsql/firebirdsql.go b/internal/tools/firebird/firebirdsql/firebirdsql.go
index c4611c929450..941529a07bb8 100644
--- a/internal/tools/firebird/firebirdsql/firebirdsql.go
+++ b/internal/tools/firebird/firebirdsql/firebirdsql.go
@@ -60,6 +60,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -166,3 +168,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestoreadddocuments/firestoreadddocuments.go b/internal/tools/firestore/firestoreadddocuments/firestoreadddocuments.go
index 2b9916dd103b..05c0c965d21e 100644
--- a/internal/tools/firestore/firestoreadddocuments/firestoreadddocuments.go
+++ b/internal/tools/firestore/firestoreadddocuments/firestoreadddocuments.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -199,3 +201,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestoredeletedocuments/firestoredeletedocuments.go b/internal/tools/firestore/firestoredeletedocuments/firestoredeletedocuments.go
index c2357423d043..04703d0b5df0 100644
--- a/internal/tools/firestore/firestoredeletedocuments/firestoredeletedocuments.go
+++ b/internal/tools/firestore/firestoredeletedocuments/firestoredeletedocuments.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -164,3 +166,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestoregetdocuments/firestoregetdocuments.go b/internal/tools/firestore/firestoregetdocuments/firestoregetdocuments.go
index f70d2414d647..135f21ef45bf 100644
--- a/internal/tools/firestore/firestoregetdocuments/firestoregetdocuments.go
+++ b/internal/tools/firestore/firestoregetdocuments/firestoregetdocuments.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestoregetrules/firestoregetrules.go b/internal/tools/firestore/firestoregetrules/firestoregetrules.go
index 51f705e51fd5..82308b90ee59 100644
--- a/internal/tools/firestore/firestoregetrules/firestoregetrules.go
+++ b/internal/tools/firestore/firestoregetrules/firestoregetrules.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -135,3 +137,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestorelistcollections/firestorelistcollections.go b/internal/tools/firestore/firestorelistcollections/firestorelistcollections.go
index 5e6f77f0c8f8..ad7301428ffb 100644
--- a/internal/tools/firestore/firestorelistcollections/firestorelistcollections.go
+++ b/internal/tools/firestore/firestorelistcollections/firestorelistcollections.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -149,3 +151,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestorequery/firestorequery.go b/internal/tools/firestore/firestorequery/firestorequery.go
index ae794ea7475f..5ffa979c7915 100644
--- a/internal/tools/firestore/firestorequery/firestorequery.go
+++ b/internal/tools/firestore/firestorequery/firestorequery.go
@@ -78,6 +78,8 @@ type Config struct {
 	// Parameters for template substitution
 	Parameters  parameters.Parameters  `yaml:"parameters"`
 	Annotations *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -413,3 +415,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestorequerycollection/firestorequerycollection.go b/internal/tools/firestore/firestorequerycollection/firestorequerycollection.go
index 51ecfb502539..39bb15b2d1ff 100644
--- a/internal/tools/firestore/firestorequerycollection/firestorequerycollection.go
+++ b/internal/tools/firestore/firestorequerycollection/firestorequerycollection.go
@@ -103,6 +103,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -426,3 +428,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestoreupdatedocument/firestoreupdatedocument.go b/internal/tools/firestore/firestoreupdatedocument/firestoreupdatedocument.go
index 0250ff302d5a..65a601c5bfa7 100644
--- a/internal/tools/firestore/firestoreupdatedocument/firestoreupdatedocument.go
+++ b/internal/tools/firestore/firestoreupdatedocument/firestoreupdatedocument.go
@@ -62,6 +62,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -285,3 +287,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/firestore/firestorevalidaterules/firestorevalidaterules.go b/internal/tools/firestore/firestorevalidaterules/firestorevalidaterules.go
index a673a0249b10..2087e31ad49b 100644
--- a/internal/tools/firestore/firestorevalidaterules/firestorevalidaterules.go
+++ b/internal/tools/firestore/firestorevalidaterules/firestorevalidaterules.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/http/http.go b/internal/tools/http/http.go
index a30fcf7a0e35..bb317b641b32 100644
--- a/internal/tools/http/http.go
+++ b/internal/tools/http/http.go
@@ -70,6 +70,8 @@ type Config struct {
 	BodyParams   parameters.Parameters  `yaml:"bodyParams"`
 	HeaderParams parameters.Parameters  `yaml:"headerParams"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -311,3 +313,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookeradddashboardelement/lookeradddashboardelement.go b/internal/tools/looker/lookeradddashboardelement/lookeradddashboardelement.go
index e4ec9dd3afec..ad03fddafb09 100644
--- a/internal/tools/looker/lookeradddashboardelement/lookeradddashboardelement.go
+++ b/internal/tools/looker/lookeradddashboardelement/lookeradddashboardelement.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -296,3 +298,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookeradddashboardfilter/lookeradddashboardfilter.go b/internal/tools/looker/lookeradddashboardfilter/lookeradddashboardfilter.go
index 165d15706ff6..79f1df993ac7 100644
--- a/internal/tools/looker/lookeradddashboardfilter/lookeradddashboardfilter.go
+++ b/internal/tools/looker/lookeradddashboardfilter/lookeradddashboardfilter.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -265,3 +267,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerconversationalanalytics/lookerconversationalanalytics.go b/internal/tools/looker/lookerconversationalanalytics/lookerconversationalanalytics.go
index 497945c851a5..9e217c8a393c 100644
--- a/internal/tools/looker/lookerconversationalanalytics/lookerconversationalanalytics.go
+++ b/internal/tools/looker/lookerconversationalanalytics/lookerconversationalanalytics.go
@@ -131,6 +131,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -568,3 +570,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookercreateagent/lookercreateagent.go b/internal/tools/looker/lookercreateagent/lookercreateagent.go
index 4c6e542979c2..bdca25e077f1 100644
--- a/internal/tools/looker/lookercreateagent/lookercreateagent.go
+++ b/internal/tools/looker/lookercreateagent/lookercreateagent.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -237,3 +239,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookercreategitbranch/lookercreategitbranch.go b/internal/tools/looker/lookercreategitbranch/lookercreategitbranch.go
index 0d6dad10805d..92379b68031a 100644
--- a/internal/tools/looker/lookercreategitbranch/lookercreategitbranch.go
+++ b/internal/tools/looker/lookercreategitbranch/lookercreategitbranch.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookercreateprojectdirectory/lookercreateprojectdirectory.go b/internal/tools/looker/lookercreateprojectdirectory/lookercreateprojectdirectory.go
index 607b3de5c54d..e4dcd9e40ad5 100644
--- a/internal/tools/looker/lookercreateprojectdirectory/lookercreateprojectdirectory.go
+++ b/internal/tools/looker/lookercreateprojectdirectory/lookercreateprojectdirectory.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -175,3 +177,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookercreateprojectfile/lookercreateprojectfile.go b/internal/tools/looker/lookercreateprojectfile/lookercreateprojectfile.go
index 93f405eff9bc..8935c6828dff 100644
--- a/internal/tools/looker/lookercreateprojectfile/lookercreateprojectfile.go
+++ b/internal/tools/looker/lookercreateprojectfile/lookercreateprojectfile.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -189,3 +191,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookercreateviewfromtable/lookercreateviewfromtable.go b/internal/tools/looker/lookercreateviewfromtable/lookercreateviewfromtable.go
index d501b9202524..b4cbfa7638b4 100644
--- a/internal/tools/looker/lookercreateviewfromtable/lookercreateviewfromtable.go
+++ b/internal/tools/looker/lookercreateviewfromtable/lookercreateviewfromtable.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -270,3 +272,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerdeleteagent/lookerdeleteagent.go b/internal/tools/looker/lookerdeleteagent/lookerdeleteagent.go
index 9a7947b8c497..ddb46f532454 100644
--- a/internal/tools/looker/lookerdeleteagent/lookerdeleteagent.go
+++ b/internal/tools/looker/lookerdeleteagent/lookerdeleteagent.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -179,3 +181,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerdeletegitbranch/lookerdeletegitbranch.go b/internal/tools/looker/lookerdeletegitbranch/lookerdeletegitbranch.go
index c15a84b5bb2f..275252936eba 100644
--- a/internal/tools/looker/lookerdeletegitbranch/lookerdeletegitbranch.go
+++ b/internal/tools/looker/lookerdeletegitbranch/lookerdeletegitbranch.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -171,3 +173,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerdeleteprojectdirectory/lookerdeleteprojectdirectory.go b/internal/tools/looker/lookerdeleteprojectdirectory/lookerdeleteprojectdirectory.go
index e3506377e67b..002e6127b313 100644
--- a/internal/tools/looker/lookerdeleteprojectdirectory/lookerdeleteprojectdirectory.go
+++ b/internal/tools/looker/lookerdeleteprojectdirectory/lookerdeleteprojectdirectory.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerdeleteprojectfile/lookerdeleteprojectfile.go b/internal/tools/looker/lookerdeleteprojectfile/lookerdeleteprojectfile.go
index 7a65394e1075..021f8a62d40e 100644
--- a/internal/tools/looker/lookerdeleteprojectfile/lookerdeleteprojectfile.go
+++ b/internal/tools/looker/lookerdeleteprojectfile/lookerdeleteprojectfile.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -181,3 +183,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerdevmode/lookerdevmode.go b/internal/tools/looker/lookerdevmode/lookerdevmode.go
index 4f4e14ab2426..5142027b01de 100644
--- a/internal/tools/looker/lookerdevmode/lookerdevmode.go
+++ b/internal/tools/looker/lookerdevmode/lookerdevmode.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -179,3 +181,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergenerateembedurl/lookergenerateembedurl.go b/internal/tools/looker/lookergenerateembedurl/lookergenerateembedurl.go
index 19f069cfdac6..e6b1aa12aef2 100644
--- a/internal/tools/looker/lookergenerateembedurl/lookergenerateembedurl.go
+++ b/internal/tools/looker/lookergenerateembedurl/lookergenerateembedurl.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -194,3 +196,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetagent/lookergetagent.go b/internal/tools/looker/lookergetagent/lookergetagent.go
index bc29d2b5f4ed..7cc09d879373 100644
--- a/internal/tools/looker/lookergetagent/lookergetagent.go
+++ b/internal/tools/looker/lookergetagent/lookergetagent.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetconnectiondatabases/lookergetconnectiondatabases.go b/internal/tools/looker/lookergetconnectiondatabases/lookergetconnectiondatabases.go
index 1f34549e3604..0f5efbfaa8b3 100644
--- a/internal/tools/looker/lookergetconnectiondatabases/lookergetconnectiondatabases.go
+++ b/internal/tools/looker/lookergetconnectiondatabases/lookergetconnectiondatabases.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -168,3 +170,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetconnections/lookergetconnections.go b/internal/tools/looker/lookergetconnections/lookergetconnections.go
index 26c090b1febc..9c197bc32a22 100644
--- a/internal/tools/looker/lookergetconnections/lookergetconnections.go
+++ b/internal/tools/looker/lookergetconnections/lookergetconnections.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -187,3 +189,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetconnectionschemas/lookergetconnectionschemas.go b/internal/tools/looker/lookergetconnectionschemas/lookergetconnectionschemas.go
index cb39f5877638..880769236e49 100644
--- a/internal/tools/looker/lookergetconnectionschemas/lookergetconnectionschemas.go
+++ b/internal/tools/looker/lookergetconnectionschemas/lookergetconnectionschemas.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -175,3 +177,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetconnectiontablecolumns/lookergetconnectiontablecolumns.go b/internal/tools/looker/lookergetconnectiontablecolumns/lookergetconnectiontablecolumns.go
index 9af71eda00c3..65636d39b35f 100644
--- a/internal/tools/looker/lookergetconnectiontablecolumns/lookergetconnectiontablecolumns.go
+++ b/internal/tools/looker/lookergetconnectiontablecolumns/lookergetconnectiontablecolumns.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -211,3 +213,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetconnectiontables/lookergetconnectiontables.go b/internal/tools/looker/lookergetconnectiontables/lookergetconnectiontables.go
index 04df0acd0ea4..86b4bccaf659 100644
--- a/internal/tools/looker/lookergetconnectiontables/lookergetconnectiontables.go
+++ b/internal/tools/looker/lookergetconnectiontables/lookergetconnectiontables.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -202,3 +204,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetdashboards/lookergetdashboards.go b/internal/tools/looker/lookergetdashboards/lookergetdashboards.go
index 3e0c6d058746..2dcac44bcedb 100644
--- a/internal/tools/looker/lookergetdashboards/lookergetdashboards.go
+++ b/internal/tools/looker/lookergetdashboards/lookergetdashboards.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -213,3 +215,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetdimensions/lookergetdimensions.go b/internal/tools/looker/lookergetdimensions/lookergetdimensions.go
index 7e883309e6e6..8e6788719901 100644
--- a/internal/tools/looker/lookergetdimensions/lookergetdimensions.go
+++ b/internal/tools/looker/lookergetdimensions/lookergetdimensions.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -188,3 +190,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetexplores/lookergetexplores.go b/internal/tools/looker/lookergetexplores/lookergetexplores.go
index 97b00ab491be..b22693d3f705 100644
--- a/internal/tools/looker/lookergetexplores/lookergetexplores.go
+++ b/internal/tools/looker/lookergetexplores/lookergetexplores.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -197,3 +199,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetfilters/lookergetfilters.go b/internal/tools/looker/lookergetfilters/lookergetfilters.go
index 9b6d0878107c..36c34fbea65e 100644
--- a/internal/tools/looker/lookergetfilters/lookergetfilters.go
+++ b/internal/tools/looker/lookergetfilters/lookergetfilters.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -188,3 +190,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetgitbranch/lookergetgitbranch.go b/internal/tools/looker/lookergetgitbranch/lookergetgitbranch.go
index 15c1457fdc0c..605b0adb3eef 100644
--- a/internal/tools/looker/lookergetgitbranch/lookergetgitbranch.go
+++ b/internal/tools/looker/lookergetgitbranch/lookergetgitbranch.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetlookmltests/lookergetlookmltests.go b/internal/tools/looker/lookergetlookmltests/lookergetlookmltests.go
index f04b793cafae..49b1c734f36e 100644
--- a/internal/tools/looker/lookergetlookmltests/lookergetlookmltests.go
+++ b/internal/tools/looker/lookergetlookmltests/lookergetlookmltests.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -176,3 +178,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetlooks/lookergetlooks.go b/internal/tools/looker/lookergetlooks/lookergetlooks.go
index 70bb70cfda46..1e7e9699f6ea 100644
--- a/internal/tools/looker/lookergetlooks/lookergetlooks.go
+++ b/internal/tools/looker/lookergetlooks/lookergetlooks.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -219,3 +221,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetmeasures/lookergetmeasures.go b/internal/tools/looker/lookergetmeasures/lookergetmeasures.go
index d0c30c1c3ce3..7830ff3a8049 100644
--- a/internal/tools/looker/lookergetmeasures/lookergetmeasures.go
+++ b/internal/tools/looker/lookergetmeasures/lookergetmeasures.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -188,3 +190,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetmodels/lookergetmodels.go b/internal/tools/looker/lookergetmodels/lookergetmodels.go
index ca1936262f3c..ba8ac35f3e37 100644
--- a/internal/tools/looker/lookergetmodels/lookergetmodels.go
+++ b/internal/tools/looker/lookergetmodels/lookergetmodels.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -189,3 +191,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetparameters/lookergetparameters.go b/internal/tools/looker/lookergetparameters/lookergetparameters.go
index 4cb40e09df2c..99e8510fee4e 100644
--- a/internal/tools/looker/lookergetparameters/lookergetparameters.go
+++ b/internal/tools/looker/lookergetparameters/lookergetparameters.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -188,3 +190,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetprojectdirectories/lookergetprojectdirectories.go b/internal/tools/looker/lookergetprojectdirectories/lookergetprojectdirectories.go
index 046471baf3e8..6f561355882f 100644
--- a/internal/tools/looker/lookergetprojectdirectories/lookergetprojectdirectories.go
+++ b/internal/tools/looker/lookergetprojectdirectories/lookergetprojectdirectories.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetprojectfile/lookergetprojectfile.go b/internal/tools/looker/lookergetprojectfile/lookergetprojectfile.go
index 2d898848c121..2e0bdfc2bbdd 100644
--- a/internal/tools/looker/lookergetprojectfile/lookergetprojectfile.go
+++ b/internal/tools/looker/lookergetprojectfile/lookergetprojectfile.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -185,3 +187,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetprojectfiles/lookergetprojectfiles.go b/internal/tools/looker/lookergetprojectfiles/lookergetprojectfiles.go
index 5282a02a7577..b64cccd1368b 100644
--- a/internal/tools/looker/lookergetprojectfiles/lookergetprojectfiles.go
+++ b/internal/tools/looker/lookergetprojectfiles/lookergetprojectfiles.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -201,3 +203,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookergetprojects/lookergetprojects.go b/internal/tools/looker/lookergetprojects/lookergetprojects.go
index a3bb47b104f4..976f58acbf37 100644
--- a/internal/tools/looker/lookergetprojects/lookergetprojects.go
+++ b/internal/tools/looker/lookergetprojects/lookergetprojects.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerhealthanalyze/lookerhealthanalyze.go b/internal/tools/looker/lookerhealthanalyze/lookerhealthanalyze.go
index 91e1bc4ed911..36345c8ffc04 100644
--- a/internal/tools/looker/lookerhealthanalyze/lookerhealthanalyze.go
+++ b/internal/tools/looker/lookerhealthanalyze/lookerhealthanalyze.go
@@ -66,6 +66,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   map[string]any         `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -577,3 +579,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerhealthpulse/lookerhealthpulse.go b/internal/tools/looker/lookerhealthpulse/lookerhealthpulse.go
index 6de8f02d8a5a..d468f8ca946d 100644
--- a/internal/tools/looker/lookerhealthpulse/lookerhealthpulse.go
+++ b/internal/tools/looker/lookerhealthpulse/lookerhealthpulse.go
@@ -66,6 +66,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   map[string]any         `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -476,3 +478,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerhealthvacuum/lookerhealthvacuum.go b/internal/tools/looker/lookerhealthvacuum/lookerhealthvacuum.go
index b25ee4a41554..5350bc13ef39 100644
--- a/internal/tools/looker/lookerhealthvacuum/lookerhealthvacuum.go
+++ b/internal/tools/looker/lookerhealthvacuum/lookerhealthvacuum.go
@@ -66,6 +66,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   map[string]any         `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -488,3 +490,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerlistagents/lookerlistagents.go b/internal/tools/looker/lookerlistagents/lookerlistagents.go
index 11dcc20087aa..f9a5ea3fc7d1 100644
--- a/internal/tools/looker/lookerlistagents/lookerlistagents.go
+++ b/internal/tools/looker/lookerlistagents/lookerlistagents.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -168,3 +170,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerlistgitbranches/lookerlistgitbranches.go b/internal/tools/looker/lookerlistgitbranches/lookerlistgitbranches.go
index dec0ecbbc731..1fabec7e60dd 100644
--- a/internal/tools/looker/lookerlistgitbranches/lookerlistgitbranches.go
+++ b/internal/tools/looker/lookerlistgitbranches/lookerlistgitbranches.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookermakedashboard/lookermakedashboard.go b/internal/tools/looker/lookermakedashboard/lookermakedashboard.go
index 362151bb784f..c20ded992d27 100644
--- a/internal/tools/looker/lookermakedashboard/lookermakedashboard.go
+++ b/internal/tools/looker/lookermakedashboard/lookermakedashboard.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -233,3 +235,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookermakelook/lookermakelook.go b/internal/tools/looker/lookermakelook/lookermakelook.go
index 7f4dc0302d54..30e55ce9601e 100644
--- a/internal/tools/looker/lookermakelook/lookermakelook.go
+++ b/internal/tools/looker/lookermakelook/lookermakelook.go
@@ -62,6 +62,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -254,3 +256,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerquery/lookerquery.go b/internal/tools/looker/lookerquery/lookerquery.go
index 5587b479c0f6..fab59329e5f3 100644
--- a/internal/tools/looker/lookerquery/lookerquery.go
+++ b/internal/tools/looker/lookerquery/lookerquery.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -181,3 +183,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerquerysql/lookerquerysql.go b/internal/tools/looker/lookerquerysql/lookerquerysql.go
index e10700f0f1e8..3d937014a7b1 100644
--- a/internal/tools/looker/lookerquerysql/lookerquerysql.go
+++ b/internal/tools/looker/lookerquerysql/lookerquerysql.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -171,3 +173,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerqueryurl/lookerqueryurl.go b/internal/tools/looker/lookerqueryurl/lookerqueryurl.go
index fa5be58e1108..a0582532720c 100644
--- a/internal/tools/looker/lookerqueryurl/lookerqueryurl.go
+++ b/internal/tools/looker/lookerqueryurl/lookerqueryurl.go
@@ -60,6 +60,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -203,3 +205,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerrundashboard/lookerrundashboard.go b/internal/tools/looker/lookerrundashboard/lookerrundashboard.go
index 50078ef78b6a..b7e39a399314 100644
--- a/internal/tools/looker/lookerrundashboard/lookerrundashboard.go
+++ b/internal/tools/looker/lookerrundashboard/lookerrundashboard.go
@@ -62,6 +62,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -286,3 +288,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerrunlook/lookerrunlook.go b/internal/tools/looker/lookerrunlook/lookerrunlook.go
index 6ae40d8358c0..15c91bbaeabe 100644
--- a/internal/tools/looker/lookerrunlook/lookerrunlook.go
+++ b/internal/tools/looker/lookerrunlook/lookerrunlook.go
@@ -61,6 +61,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -206,3 +208,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerrunlookmltests/lookerrunlookmltests.go b/internal/tools/looker/lookerrunlookmltests/lookerrunlookmltests.go
index cbb1fc5760f8..1d04e059720c 100644
--- a/internal/tools/looker/lookerrunlookmltests/lookerrunlookmltests.go
+++ b/internal/tools/looker/lookerrunlookmltests/lookerrunlookmltests.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -197,3 +199,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerswitchgitbranch/lookerswitchgitbranch.go b/internal/tools/looker/lookerswitchgitbranch/lookerswitchgitbranch.go
index f6cee296edaf..fe65065b78c4 100644
--- a/internal/tools/looker/lookerswitchgitbranch/lookerswitchgitbranch.go
+++ b/internal/tools/looker/lookerswitchgitbranch/lookerswitchgitbranch.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -179,3 +181,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerupdateagent/lookerupdateagent.go b/internal/tools/looker/lookerupdateagent/lookerupdateagent.go
index 77b5493ebd6b..c769cdf16639 100644
--- a/internal/tools/looker/lookerupdateagent/lookerupdateagent.go
+++ b/internal/tools/looker/lookerupdateagent/lookerupdateagent.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -244,3 +246,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookerupdateprojectfile/lookerupdateprojectfile.go b/internal/tools/looker/lookerupdateprojectfile/lookerupdateprojectfile.go
index 3a3b25bc3863..0c3c22e523cb 100644
--- a/internal/tools/looker/lookerupdateprojectfile/lookerupdateprojectfile.go
+++ b/internal/tools/looker/lookerupdateprojectfile/lookerupdateprojectfile.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -190,3 +192,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/looker/lookervalidateproject/lookervalidateproject.go b/internal/tools/looker/lookervalidateproject/lookervalidateproject.go
index 67028acdcbf4..c5c35b95f62f 100644
--- a/internal/tools/looker/lookervalidateproject/lookervalidateproject.go
+++ b/internal/tools/looker/lookervalidateproject/lookervalidateproject.go
@@ -59,6 +59,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -176,3 +178,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mindsdb/mindsdbexecutesql/mindsdbexecutesql.go b/internal/tools/mindsdb/mindsdbexecutesql/mindsdbexecutesql.go
index 42f4ab1c2662..fd07aa107c08 100644
--- a/internal/tools/mindsdb/mindsdbexecutesql/mindsdbexecutesql.go
+++ b/internal/tools/mindsdb/mindsdbexecutesql/mindsdbexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mindsdb/mindsdbsql/mindsdbsql.go b/internal/tools/mindsdb/mindsdbsql/mindsdbsql.go
index d56ac40d48b5..c73ac3e4f90a 100644
--- a/internal/tools/mindsdb/mindsdbsql/mindsdbsql.go
+++ b/internal/tools/mindsdb/mindsdbsql/mindsdbsql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -156,3 +158,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbaggregate/mongodbaggregate.go b/internal/tools/mongodb/mongodbaggregate/mongodbaggregate.go
index 99834626e80e..c4f0b9c11c9b 100644
--- a/internal/tools/mongodb/mongodbaggregate/mongodbaggregate.go
+++ b/internal/tools/mongodb/mongodbaggregate/mongodbaggregate.go
@@ -63,6 +63,8 @@ type Config struct {
 	Canonical       bool                   `yaml:"canonical"`
 	ReadOnly        bool                   `yaml:"readOnly"`
 	Annotations     *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -155,3 +157,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbdeletemany/mongodbdeletemany.go b/internal/tools/mongodb/mongodbdeletemany/mongodbdeletemany.go
index 2a344fab13a4..a7dcc01f4c4f 100644
--- a/internal/tools/mongodb/mongodbdeletemany/mongodbdeletemany.go
+++ b/internal/tools/mongodb/mongodbdeletemany/mongodbdeletemany.go
@@ -61,6 +61,8 @@ type Config struct {
 	FilterPayload string                 `yaml:"filterPayload" validate:"required"`
 	FilterParams  parameters.Parameters  `yaml:"filterParams"`
 	Annotations   *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -159,3 +161,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbdeleteone/mongodbdeleteone.go b/internal/tools/mongodb/mongodbdeleteone/mongodbdeleteone.go
index f9f068d6f428..41570c8469a1 100644
--- a/internal/tools/mongodb/mongodbdeleteone/mongodbdeleteone.go
+++ b/internal/tools/mongodb/mongodbdeleteone/mongodbdeleteone.go
@@ -61,6 +61,8 @@ type Config struct {
 	FilterPayload string                 `yaml:"filterPayload" validate:"required"`
 	FilterParams  parameters.Parameters  `yaml:"filterParams"`
 	Annotations   *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -160,3 +162,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbfind/mongodbfind.go b/internal/tools/mongodb/mongodbfind/mongodbfind.go
index c66d62ebd0bc..8166e70f7884 100644
--- a/internal/tools/mongodb/mongodbfind/mongodbfind.go
+++ b/internal/tools/mongodb/mongodbfind/mongodbfind.go
@@ -68,6 +68,8 @@ type Config struct {
 	SortParams     parameters.Parameters  `yaml:"sortParams"`
 	Limit          int64                  `yaml:"limit"`
 	Annotations    *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -213,3 +215,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbfindone/mongodbfindone.go b/internal/tools/mongodb/mongodbfindone/mongodbfindone.go
index 469e91e9b9fc..29e8a1233a8c 100644
--- a/internal/tools/mongodb/mongodbfindone/mongodbfindone.go
+++ b/internal/tools/mongodb/mongodbfindone/mongodbfindone.go
@@ -65,6 +65,8 @@ type Config struct {
 	ProjectPayload string                 `yaml:"projectPayload"`
 	ProjectParams  parameters.Parameters  `yaml:"projectParams"`
 	Annotations    *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbinsertmany/mongodbinsertmany.go b/internal/tools/mongodb/mongodbinsertmany/mongodbinsertmany.go
index 5d79375385dd..8b3c3baa0299 100644
--- a/internal/tools/mongodb/mongodbinsertmany/mongodbinsertmany.go
+++ b/internal/tools/mongodb/mongodbinsertmany/mongodbinsertmany.go
@@ -60,6 +60,8 @@ type Config struct {
 	Collection   string                 `yaml:"collection" validate:"required"`
 	Canonical    bool                   `yaml:"canonical"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.PayloadParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbinsertone/mongodbinsertone.go b/internal/tools/mongodb/mongodbinsertone/mongodbinsertone.go
index 7636a2bdddaa..2d20bf63a68e 100644
--- a/internal/tools/mongodb/mongodbinsertone/mongodbinsertone.go
+++ b/internal/tools/mongodb/mongodbinsertone/mongodbinsertone.go
@@ -60,6 +60,8 @@ type Config struct {
 	Collection   string                 `yaml:"collection" validate:"required"`
 	Canonical    bool                   `yaml:"canonical"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -155,3 +157,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.PayloadParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbupdatemany/mongodbupdatemany.go b/internal/tools/mongodb/mongodbupdatemany/mongodbupdatemany.go
index 53a458bce7dc..608662b66c33 100644
--- a/internal/tools/mongodb/mongodbupdatemany/mongodbupdatemany.go
+++ b/internal/tools/mongodb/mongodbupdatemany/mongodbupdatemany.go
@@ -64,6 +64,8 @@ type Config struct {
 	Canonical     bool                   `yaml:"canonical"`
 	Upsert        bool                   `yaml:"upsert"`
 	Annotations   *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -166,3 +168,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mongodb/mongodbupdateone/mongodbupdateone.go b/internal/tools/mongodb/mongodbupdateone/mongodbupdateone.go
index e8c656c01ebd..145294dbaea1 100644
--- a/internal/tools/mongodb/mongodbupdateone/mongodbupdateone.go
+++ b/internal/tools/mongodb/mongodbupdateone/mongodbupdateone.go
@@ -65,6 +65,8 @@ type Config struct {
 	Canonical   bool                   `yaml:"canonical"`
 	Upsert      bool                   `yaml:"upsert"`
 	Annotations *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -167,3 +169,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mssql/mssqlexecutesql/mssqlexecutesql.go b/internal/tools/mssql/mssqlexecutesql/mssqlexecutesql.go
index b536d254da20..2745ea78468f 100644
--- a/internal/tools/mssql/mssqlexecutesql/mssqlexecutesql.go
+++ b/internal/tools/mssql/mssqlexecutesql/mssqlexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -148,3 +150,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mssql/mssqllisttables/mssqllisttables.go b/internal/tools/mssql/mssqllisttables/mssqllisttables.go
index 854565341de0..1754c4f6fe82 100644
--- a/internal/tools/mssql/mssqllisttables/mssqllisttables.go
+++ b/internal/tools/mssql/mssqllisttables/mssqllisttables.go
@@ -305,6 +305,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -403,3 +405,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mssql/mssqlsql/mssqlsql.go b/internal/tools/mssql/mssqlsql/mssqlsql.go
index 82f7d700558b..397a8db558a8 100644
--- a/internal/tools/mssql/mssqlsql/mssqlsql.go
+++ b/internal/tools/mssql/mssqlsql/mssqlsql.go
@@ -60,6 +60,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqlexecutesql/mysqlexecutesql.go b/internal/tools/mysql/mysqlexecutesql/mysqlexecutesql.go
index 18fae0c2d4f3..0acb7afc2f20 100644
--- a/internal/tools/mysql/mysqlexecutesql/mysqlexecutesql.go
+++ b/internal/tools/mysql/mysqlexecutesql/mysqlexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -148,3 +150,7 @@ func (t Tool) GetAuthTokenHeaderName(_ tools.SourceProvider) (string, error) {
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqlgetqueryplan/mysqlgetqueryplan.go b/internal/tools/mysql/mysqlgetqueryplan/mysqlgetqueryplan.go
index 60c5abd99876..b7fc243eb178 100644
--- a/internal/tools/mysql/mysqlgetqueryplan/mysqlgetqueryplan.go
+++ b/internal/tools/mysql/mysqlgetqueryplan/mysqlgetqueryplan.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -169,3 +171,7 @@ func (t Tool) GetAuthTokenHeaderName(_ tools.SourceProvider) (string, error) {
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqllistactivequeries/mysqllistactivequeries.go b/internal/tools/mysql/mysqllistactivequeries/mysqllistactivequeries.go
index a009634590f5..c7cd1c9c4135 100644
--- a/internal/tools/mysql/mysqllistactivequeries/mysqllistactivequeries.go
+++ b/internal/tools/mysql/mysqllistactivequeries/mysqllistactivequeries.go
@@ -120,6 +120,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -241,3 +243,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqllisttablefragmentation/mysqllisttablefragmentation.go b/internal/tools/mysql/mysqllisttablefragmentation/mysqllisttablefragmentation.go
index e8ae8d478670..9e91db0f9754 100644
--- a/internal/tools/mysql/mysqllisttablefragmentation/mysqllisttablefragmentation.go
+++ b/internal/tools/mysql/mysqllisttablefragmentation/mysqllisttablefragmentation.go
@@ -78,6 +78,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -187,3 +189,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqllisttables/mysqllisttables.go b/internal/tools/mysql/mysqllisttables/mysqllisttables.go
index 3ecd9d3ccec9..61248dafe557 100644
--- a/internal/tools/mysql/mysqllisttables/mysqllisttables.go
+++ b/internal/tools/mysql/mysqllisttables/mysqllisttables.go
@@ -209,6 +209,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -307,3 +309,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqllisttablesmissinguniqueindexes/mysqllisttablesmissinguniqueindexes.go b/internal/tools/mysql/mysqllisttablesmissinguniqueindexes/mysqllisttablesmissinguniqueindexes.go
index f7324d06f18b..781c47a3cb0a 100644
--- a/internal/tools/mysql/mysqllisttablesmissinguniqueindexes/mysqllisttablesmissinguniqueindexes.go
+++ b/internal/tools/mysql/mysqllisttablesmissinguniqueindexes/mysqllisttablesmissinguniqueindexes.go
@@ -79,6 +79,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -177,3 +179,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqllisttablestats/mysqllisttablestats.go b/internal/tools/mysql/mysqllisttablestats/mysqllisttablestats.go
index c3a9f8a639b1..481df64ac176 100644
--- a/internal/tools/mysql/mysqllisttablestats/mysqllisttablestats.go
+++ b/internal/tools/mysql/mysqllisttablestats/mysqllisttablestats.go
@@ -95,6 +95,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -215,3 +217,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/mysql/mysqlsql/mysqlsql.go b/internal/tools/mysql/mysqlsql/mysqlsql.go
index e58072dc62b9..8f6b69f1459e 100644
--- a/internal/tools/mysql/mysqlsql/mysqlsql.go
+++ b/internal/tools/mysql/mysqlsql/mysqlsql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/neo4j/neo4jcypher/neo4jcypher.go b/internal/tools/neo4j/neo4jcypher/neo4jcypher.go
index c1ed11d37ab8..9551a9f611c3 100644
--- a/internal/tools/neo4j/neo4jcypher/neo4jcypher.go
+++ b/internal/tools/neo4j/neo4jcypher/neo4jcypher.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -134,3 +136,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/neo4j/neo4jexecutecypher/neo4jexecutecypher.go b/internal/tools/neo4j/neo4jexecutecypher/neo4jexecutecypher.go
index d235c63b2541..eb21f3c43bd9 100644
--- a/internal/tools/neo4j/neo4jexecutecypher/neo4jexecutecypher.go
+++ b/internal/tools/neo4j/neo4jexecutecypher/neo4jexecutecypher.go
@@ -56,6 +56,8 @@ type Config struct {
 	ReadOnly     bool                   `yaml:"readOnly"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/neo4j/neo4jschema/neo4jschema.go b/internal/tools/neo4j/neo4jschema/neo4jschema.go
index d2133283960c..efed88efa99b 100644
--- a/internal/tools/neo4j/neo4jschema/neo4jschema.go
+++ b/internal/tools/neo4j/neo4jschema/neo4jschema.go
@@ -70,6 +70,8 @@ type Config struct {
 	AuthRequired       []string               `yaml:"authRequired"`
 	CacheExpireMinutes *int                   `yaml:"cacheExpireMinutes,omitempty"` // Cache expiration time in minutes.
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // Statically verify that Config implements the tools.ToolConfig interface.
@@ -705,3 +707,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return parameters.Parameters{}
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/oceanbase/oceanbaseexecutesql/oceanbaseexecutesql.go b/internal/tools/oceanbase/oceanbaseexecutesql/oceanbaseexecutesql.go
index 9ce33d483ade..c6bb985101db 100644
--- a/internal/tools/oceanbase/oceanbaseexecutesql/oceanbaseexecutesql.go
+++ b/internal/tools/oceanbase/oceanbaseexecutesql/oceanbaseexecutesql.go
@@ -48,6 +48,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -145,3 +147,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/oceanbase/oceanbasesql/oceanbasesql.go b/internal/tools/oceanbase/oceanbasesql/oceanbasesql.go
index c6cccd79983f..fa52fee04694 100644
--- a/internal/tools/oceanbase/oceanbasesql/oceanbasesql.go
+++ b/internal/tools/oceanbase/oceanbasesql/oceanbasesql.go
@@ -51,6 +51,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -156,3 +158,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/oracle/oracleexecutesql/oracleexecutesql.go b/internal/tools/oracle/oracleexecutesql/oracleexecutesql.go
index 0816bed54997..736ca745a532 100644
--- a/internal/tools/oracle/oracleexecutesql/oracleexecutesql.go
+++ b/internal/tools/oracle/oracleexecutesql/oracleexecutesql.go
@@ -45,6 +45,8 @@ type Config struct {
 	ReadOnly     *bool                  `yaml:"readOnly"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -143,3 +145,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/oracle/oraclesql/oraclesql.go b/internal/tools/oracle/oraclesql/oraclesql.go
index 62b2e954d828..a1b6aca61b0b 100644
--- a/internal/tools/oracle/oraclesql/oraclesql.go
+++ b/internal/tools/oracle/oraclesql/oraclesql.go
@@ -48,6 +48,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgresdatabaseoverview/postgresdatabaseoverview.go b/internal/tools/postgres/postgresdatabaseoverview/postgresdatabaseoverview.go
index eaabe30d7df1..c0a69ce163d5 100644
--- a/internal/tools/postgres/postgresdatabaseoverview/postgresdatabaseoverview.go
+++ b/internal/tools/postgres/postgresdatabaseoverview/postgresdatabaseoverview.go
@@ -70,6 +70,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -158,3 +160,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgresexecutesql/postgresexecutesql.go b/internal/tools/postgres/postgresexecutesql/postgresexecutesql.go
index 04e6ffc0c425..61e0ed0ae456 100644
--- a/internal/tools/postgres/postgresexecutesql/postgresexecutesql.go
+++ b/internal/tools/postgres/postgresexecutesql/postgresexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgresgetcolumncardinality/postgresgetcolumncardinality.go b/internal/tools/postgres/postgresgetcolumncardinality/postgresgetcolumncardinality.go
index 30ef40e81ed6..0bfd1165bb7c 100644
--- a/internal/tools/postgres/postgresgetcolumncardinality/postgresgetcolumncardinality.go
+++ b/internal/tools/postgres/postgresgetcolumncardinality/postgresgetcolumncardinality.go
@@ -75,6 +75,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistactivequeries/postgreslistactivequeries.go b/internal/tools/postgres/postgreslistactivequeries/postgreslistactivequeries.go
index ce255b0d33cc..8ce48a438469 100644
--- a/internal/tools/postgres/postgreslistactivequeries/postgreslistactivequeries.go
+++ b/internal/tools/postgres/postgreslistactivequeries/postgreslistactivequeries.go
@@ -79,6 +79,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistavailableextensions/postgreslistavailableextensions.go b/internal/tools/postgres/postgreslistavailableextensions/postgreslistavailableextensions.go
index 58b6e55eeffb..0676e0f6b9f7 100644
--- a/internal/tools/postgres/postgreslistavailableextensions/postgreslistavailableextensions.go
+++ b/internal/tools/postgres/postgreslistavailableextensions/postgreslistavailableextensions.go
@@ -66,6 +66,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -144,3 +146,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistdatabasestats/postgreslistdatabasestats.go b/internal/tools/postgres/postgreslistdatabasestats/postgreslistdatabasestats.go
index 975a0be4f8fb..20f2faae0b47 100644
--- a/internal/tools/postgres/postgreslistdatabasestats/postgreslistdatabasestats.go
+++ b/internal/tools/postgres/postgreslistdatabasestats/postgreslistdatabasestats.go
@@ -122,6 +122,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -239,3 +241,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistindexes/postgreslistindexes.go b/internal/tools/postgres/postgreslistindexes/postgreslistindexes.go
index 19826b2163ed..73dfe685d893 100644
--- a/internal/tools/postgres/postgreslistindexes/postgreslistindexes.go
+++ b/internal/tools/postgres/postgreslistindexes/postgreslistindexes.go
@@ -102,6 +102,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -198,3 +200,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistinstalledextensions/postgreslistinstalledextensions.go b/internal/tools/postgres/postgreslistinstalledextensions/postgreslistinstalledextensions.go
index 78c59c8ee286..500916040e95 100644
--- a/internal/tools/postgres/postgreslistinstalledextensions/postgreslistinstalledextensions.go
+++ b/internal/tools/postgres/postgreslistinstalledextensions/postgreslistinstalledextensions.go
@@ -77,6 +77,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return parameters.Parameters{}
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistlocks/postgreslistlocks.go b/internal/tools/postgres/postgreslistlocks/postgreslistlocks.go
index dc50c0fb87da..d2ebfdba490a 100644
--- a/internal/tools/postgres/postgreslistlocks/postgreslistlocks.go
+++ b/internal/tools/postgres/postgreslistlocks/postgreslistlocks.go
@@ -77,6 +77,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -169,3 +171,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistpgsettings/postgreslistpgsettings.go b/internal/tools/postgres/postgreslistpgsettings/postgreslistpgsettings.go
index 8d8fd9c52bd4..4aeb69ef58ab 100644
--- a/internal/tools/postgres/postgreslistpgsettings/postgreslistpgsettings.go
+++ b/internal/tools/postgres/postgreslistpgsettings/postgreslistpgsettings.go
@@ -75,6 +75,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -166,3 +168,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistpublicationtables/postgreslistpublicationtables.go b/internal/tools/postgres/postgreslistpublicationtables/postgreslistpublicationtables.go
index ea4f8d721803..2f7f2bf848a9 100644
--- a/internal/tools/postgres/postgreslistpublicationtables/postgreslistpublicationtables.go
+++ b/internal/tools/postgres/postgreslistpublicationtables/postgreslistpublicationtables.go
@@ -86,6 +86,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -180,3 +182,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistquerystats/postgreslistquerystats.go b/internal/tools/postgres/postgreslistquerystats/postgreslistquerystats.go
index 91c739f52a41..81679a00fa1a 100644
--- a/internal/tools/postgres/postgreslistquerystats/postgreslistquerystats.go
+++ b/internal/tools/postgres/postgreslistquerystats/postgreslistquerystats.go
@@ -76,6 +76,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -169,3 +171,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistroles/postgreslistroles.go b/internal/tools/postgres/postgreslistroles/postgreslistroles.go
index 215b3faaa80e..3efc9fdb07ad 100644
--- a/internal/tools/postgres/postgreslistroles/postgreslistroles.go
+++ b/internal/tools/postgres/postgreslistroles/postgreslistroles.go
@@ -98,6 +98,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -191,3 +193,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistschemas/postgreslistschemas.go b/internal/tools/postgres/postgreslistschemas/postgreslistschemas.go
index de08ac517a2d..228a69040338 100644
--- a/internal/tools/postgres/postgreslistschemas/postgreslistschemas.go
+++ b/internal/tools/postgres/postgreslistschemas/postgreslistschemas.go
@@ -110,6 +110,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -203,3 +205,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistsequences/postgreslistsequences.go b/internal/tools/postgres/postgreslistsequences/postgreslistsequences.go
index 38cbd5d5203a..6deace5fef18 100644
--- a/internal/tools/postgres/postgreslistsequences/postgreslistsequences.go
+++ b/internal/tools/postgres/postgreslistsequences/postgreslistsequences.go
@@ -76,6 +76,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgresliststoredprocedure/postgresliststoredprocedure.go b/internal/tools/postgres/postgresliststoredprocedure/postgresliststoredprocedure.go
index 872aec3f66a0..ae8fc803f081 100644
--- a/internal/tools/postgres/postgresliststoredprocedure/postgresliststoredprocedure.go
+++ b/internal/tools/postgres/postgresliststoredprocedure/postgresliststoredprocedure.go
@@ -86,6 +86,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -208,3 +210,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslisttables/postgreslisttables.go b/internal/tools/postgres/postgreslisttables/postgreslisttables.go
index fa2d0b91b495..4c8ff2116cbd 100644
--- a/internal/tools/postgres/postgreslisttables/postgreslisttables.go
+++ b/internal/tools/postgres/postgreslisttables/postgreslisttables.go
@@ -134,6 +134,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -228,3 +230,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslisttablespaces/postgreslisttablespaces.go b/internal/tools/postgres/postgreslisttablespaces/postgreslisttablespaces.go
index 92fe0b1944fb..98004d3724b0 100644
--- a/internal/tools/postgres/postgreslisttablespaces/postgreslisttablespaces.go
+++ b/internal/tools/postgres/postgreslisttablespaces/postgreslisttablespaces.go
@@ -82,6 +82,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslisttablestats/postgreslisttablestats.go b/internal/tools/postgres/postgreslisttablestats/postgreslisttablestats.go
index 8147901e0862..b14b670e7ad8 100644
--- a/internal/tools/postgres/postgreslisttablestats/postgreslisttablestats.go
+++ b/internal/tools/postgres/postgreslisttablestats/postgreslisttablestats.go
@@ -103,6 +103,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -209,3 +211,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslisttriggers/postgreslisttriggers.go b/internal/tools/postgres/postgreslisttriggers/postgreslisttriggers.go
index ffe98d69404f..6cd3d88f9620 100644
--- a/internal/tools/postgres/postgreslisttriggers/postgreslisttriggers.go
+++ b/internal/tools/postgres/postgreslisttriggers/postgreslisttriggers.go
@@ -102,6 +102,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -196,3 +198,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslistviews/postgreslistviews.go b/internal/tools/postgres/postgreslistviews/postgreslistviews.go
index ad378eaa3fe9..95dc6a79ed29 100644
--- a/internal/tools/postgres/postgreslistviews/postgreslistviews.go
+++ b/internal/tools/postgres/postgreslistviews/postgreslistviews.go
@@ -77,6 +77,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgreslongrunningtransactions/postgreslongrunningtransactions.go b/internal/tools/postgres/postgreslongrunningtransactions/postgreslongrunningtransactions.go
index 1255604ce2ec..01db4c528fe3 100644
--- a/internal/tools/postgres/postgreslongrunningtransactions/postgreslongrunningtransactions.go
+++ b/internal/tools/postgres/postgreslongrunningtransactions/postgreslongrunningtransactions.go
@@ -84,6 +84,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -178,3 +180,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgresreplicationstats/postgresreplicationstats.go b/internal/tools/postgres/postgresreplicationstats/postgresreplicationstats.go
index e87ed454116b..23b017745405 100644
--- a/internal/tools/postgres/postgresreplicationstats/postgresreplicationstats.go
+++ b/internal/tools/postgres/postgresreplicationstats/postgresreplicationstats.go
@@ -74,6 +74,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -165,3 +167,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.allParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/postgres/postgressql/postgressql.go b/internal/tools/postgres/postgressql/postgressql.go
index 0f4daac48ea5..f5a787a82618 100644
--- a/internal/tools/postgres/postgressql/postgressql.go
+++ b/internal/tools/postgres/postgressql/postgressql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -149,3 +151,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/redis/redis.go b/internal/tools/redis/redis.go
index df00b96a7972..9e94749f080b 100644
--- a/internal/tools/redis/redis.go
+++ b/internal/tools/redis/redis.go
@@ -57,6 +57,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -170,3 +172,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/createbatch/config.go b/internal/tools/serverlessspark/createbatch/config.go
index 229ddef9363f..883d146a7385 100644
--- a/internal/tools/serverlessspark/createbatch/config.go
+++ b/internal/tools/serverlessspark/createbatch/config.go
@@ -49,6 +49,8 @@ type Config struct {
 	RuntimeConfig     *dataprocpb.RuntimeConfig     `yaml:"runtimeConfig"`
 	EnvironmentConfig *dataprocpb.EnvironmentConfig `yaml:"environmentConfig"`
 	AuthRequired      []string                      `yaml:"authRequired"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 func NewConfig(ctx context.Context, name string, decoder *yaml.Decoder) (Config, error) {
diff --git a/internal/tools/serverlessspark/createbatch/tool.go b/internal/tools/serverlessspark/createbatch/tool.go
index bb5753408ee5..3320d21152c0 100644
--- a/internal/tools/serverlessspark/createbatch/tool.go
+++ b/internal/tools/serverlessspark/createbatch/tool.go
@@ -141,3 +141,7 @@ func (t *Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t *Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t *Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparkcancelbatch/serverlesssparkcancelbatch.go b/internal/tools/serverlessspark/serverlesssparkcancelbatch/serverlesssparkcancelbatch.go
index 9a09f64d13bd..76a735f6389f 100644
--- a/internal/tools/serverlessspark/serverlesssparkcancelbatch/serverlesssparkcancelbatch.go
+++ b/internal/tools/serverlessspark/serverlesssparkcancelbatch/serverlesssparkcancelbatch.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -157,3 +159,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t *Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t *Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparkcreatepysparkbatch/serverlesssparkcreatepysparkbatch.go b/internal/tools/serverlessspark/serverlesssparkcreatepysparkbatch/serverlesssparkcreatepysparkbatch.go
index 1f5f51d3c384..97d157493853 100644
--- a/internal/tools/serverlessspark/serverlesssparkcreatepysparkbatch/serverlesssparkcreatepysparkbatch.go
+++ b/internal/tools/serverlessspark/serverlesssparkcreatepysparkbatch/serverlesssparkcreatepysparkbatch.go
@@ -39,7 +39,7 @@ func newConfig(ctx context.Context, name string, decoder *yaml.Decoder) (tools.T
 	if err != nil {
 		return nil, err
 	}
-	return Config{baseCfg}, nil
+	return Config{Config: baseCfg}, nil
 }
 
 type Config struct {
diff --git a/internal/tools/serverlessspark/serverlesssparkcreatesparkbatch/serverlesssparkcreatesparkbatch.go b/internal/tools/serverlessspark/serverlesssparkcreatesparkbatch/serverlesssparkcreatesparkbatch.go
index 1c28287948c4..ab4ab6c3e158 100644
--- a/internal/tools/serverlessspark/serverlesssparkcreatesparkbatch/serverlesssparkcreatesparkbatch.go
+++ b/internal/tools/serverlessspark/serverlesssparkcreatesparkbatch/serverlesssparkcreatesparkbatch.go
@@ -39,7 +39,7 @@ func newConfig(ctx context.Context, name string, decoder *yaml.Decoder) (tools.T
 	if err != nil {
 		return nil, err
 	}
-	return Config{baseCfg}, nil
+	return Config{Config: baseCfg}, nil
 }
 
 type Config struct {
diff --git a/internal/tools/serverlessspark/serverlesssparkgetbatch/serverlesssparkgetbatch.go b/internal/tools/serverlessspark/serverlesssparkgetbatch/serverlesssparkgetbatch.go
index edfa705aed9a..c327f54ba99d 100644
--- a/internal/tools/serverlessspark/serverlesssparkgetbatch/serverlesssparkgetbatch.go
+++ b/internal/tools/serverlessspark/serverlesssparkgetbatch/serverlesssparkgetbatch.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -156,3 +158,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparkgetsession/serverlesssparkgetsession.go b/internal/tools/serverlessspark/serverlesssparkgetsession/serverlesssparkgetsession.go
index 5bb41fa79952..b93203c91054 100644
--- a/internal/tools/serverlessspark/serverlesssparkgetsession/serverlesssparkgetsession.go
+++ b/internal/tools/serverlessspark/serverlesssparkgetsession/serverlesssparkgetsession.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -155,3 +157,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparkgetsessiontemplate/serverlesssparkgetsessiontemplate.go b/internal/tools/serverlessspark/serverlesssparkgetsessiontemplate/serverlesssparkgetsessiontemplate.go
index afd61de8a9f9..2156d4163875 100644
--- a/internal/tools/serverlessspark/serverlesssparkgetsessiontemplate/serverlesssparkgetsessiontemplate.go
+++ b/internal/tools/serverlessspark/serverlesssparkgetsessiontemplate/serverlesssparkgetsessiontemplate.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -155,3 +157,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparklistbatches/serverlesssparklistbatches.go b/internal/tools/serverlessspark/serverlesssparklistbatches/serverlesssparklistbatches.go
index 1618bc05e7cc..b84a3e45d014 100644
--- a/internal/tools/serverlessspark/serverlesssparklistbatches/serverlesssparklistbatches.go
+++ b/internal/tools/serverlessspark/serverlesssparklistbatches/serverlesssparklistbatches.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -171,3 +173,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/serverlessspark/serverlesssparklistsessions/serverlesssparklistsessions.go b/internal/tools/serverlessspark/serverlesssparklistsessions/serverlesssparklistsessions.go
index c71a5c387f5e..ae3332608821 100644
--- a/internal/tools/serverlessspark/serverlesssparklistsessions/serverlesssparklistsessions.go
+++ b/internal/tools/serverlessspark/serverlesssparklistsessions/serverlesssparklistsessions.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -159,3 +161,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/singlestore/singlestoreexecutesql/singlestoreexecutesql.go b/internal/tools/singlestore/singlestoreexecutesql/singlestoreexecutesql.go
index e65a351e14d9..63914524921d 100644
--- a/internal/tools/singlestore/singlestoreexecutesql/singlestoreexecutesql.go
+++ b/internal/tools/singlestore/singlestoreexecutesql/singlestoreexecutesql.go
@@ -57,6 +57,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -154,3 +156,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/singlestore/singlestoresql/singlestoresql.go b/internal/tools/singlestore/singlestoresql/singlestoresql.go
index d65814b4dbbc..30548d66d18f 100644
--- a/internal/tools/singlestore/singlestoresql/singlestoresql.go
+++ b/internal/tools/singlestore/singlestoresql/singlestoresql.go
@@ -60,6 +60,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -182,3 +184,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/snowflake/snowflakeexecutesql/snowflakeexecutesql.go b/internal/tools/snowflake/snowflakeexecutesql/snowflakeexecutesql.go
index 89d21ce98065..35db474cf8d9 100644
--- a/internal/tools/snowflake/snowflakeexecutesql/snowflakeexecutesql.go
+++ b/internal/tools/snowflake/snowflakeexecutesql/snowflakeexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -149,3 +151,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/snowflake/snowflakesql/snowflakesql.go b/internal/tools/snowflake/snowflakesql/snowflakesql.go
index 5d06a5171165..762630172daf 100644
--- a/internal/tools/snowflake/snowflakesql/snowflakesql.go
+++ b/internal/tools/snowflake/snowflakesql/snowflakesql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/spanner/spannerexecutesql/spannerexecutesql.go b/internal/tools/spanner/spannerexecutesql/spannerexecutesql.go
index 5e38f7931744..2f900032b498 100644
--- a/internal/tools/spanner/spannerexecutesql/spannerexecutesql.go
+++ b/internal/tools/spanner/spannerexecutesql/spannerexecutesql.go
@@ -58,6 +58,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	ReadOnly     bool                   `yaml:"readOnly"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -150,3 +152,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/spanner/spannerlistgraphs/spannerlistgraphs.go b/internal/tools/spanner/spannerlistgraphs/spannerlistgraphs.go
index 66e38446a488..65acef15d6a3 100644
--- a/internal/tools/spanner/spannerlistgraphs/spannerlistgraphs.go
+++ b/internal/tools/spanner/spannerlistgraphs/spannerlistgraphs.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -202,3 +204,7 @@ FROM INFORMATION_SCHEMA.PROPERTY_GRAPHS PG
 WHERE 
 	EXISTS (SELECT 1 FROM FilterGraphNames WHERE FilterGraphNames.GRAPH_NAME = '%') OR PG.PROPERTY_GRAPH_NAME IN (SELECT GRAPH_NAME FROM FilterGraphNames)
 `
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/spanner/spannerlisttables/spannerlisttables.go b/internal/tools/spanner/spannerlisttables/spannerlisttables.go
index 5d5a88eb0f82..35a542f2b1f1 100644
--- a/internal/tools/spanner/spannerlisttables/spannerlisttables.go
+++ b/internal/tools/spanner/spannerlisttables/spannerlisttables.go
@@ -58,6 +58,8 @@ type Config struct {
 	Description  string                 `yaml:"description"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -569,3 +571,7 @@ LEFT JOIN constraints_info_cte AS CONSI
 LEFT JOIN indexes_info_cte AS II
   ON TI.TABLE_SCHEMA = II.TABLE_SCHEMA AND TI.TABLE_NAME = II.TABLE_NAME
 ORDER BY TI.TABLE_SCHEMA, TI.TABLE_NAME`
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/spanner/spannersql/spannersql.go b/internal/tools/spanner/spannersql/spannersql.go
index 88d919da7443..9e85a3e8502c 100644
--- a/internal/tools/spanner/spannersql/spannersql.go
+++ b/internal/tools/spanner/spannersql/spannersql.go
@@ -62,6 +62,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -194,3 +196,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/sqlite/sqliteexecutesql/sqliteexecutesql.go b/internal/tools/sqlite/sqliteexecutesql/sqliteexecutesql.go
index c7d04ff08281..2cadf67f1b89 100644
--- a/internal/tools/sqlite/sqliteexecutesql/sqliteexecutesql.go
+++ b/internal/tools/sqlite/sqliteexecutesql/sqliteexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -150,3 +152,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/sqlite/sqlitesql/sqlitesql.go b/internal/tools/sqlite/sqlitesql/sqlitesql.go
index b7bc2418181e..14cc9222f6b8 100644
--- a/internal/tools/sqlite/sqlitesql/sqlitesql.go
+++ b/internal/tools/sqlite/sqlitesql/sqlitesql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -151,3 +153,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/tidb/tidbexecutesql/tidbexecutesql.go b/internal/tools/tidb/tidbexecutesql/tidbexecutesql.go
index 3493457a3920..586def947021 100644
--- a/internal/tools/tidb/tidbexecutesql/tidbexecutesql.go
+++ b/internal/tools/tidb/tidbexecutesql/tidbexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -149,3 +151,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/tidb/tidbsql/tidbsql.go b/internal/tools/tidb/tidbsql/tidbsql.go
index a924e79800ee..06049244552d 100644
--- a/internal/tools/tidb/tidbsql/tidbsql.go
+++ b/internal/tools/tidb/tidbsql/tidbsql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -153,3 +155,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/tools.go b/internal/tools/tools.go
index ad7320ba9e59..ec60f1a21e28 100644
--- a/internal/tools/tools.go
+++ b/internal/tools/tools.go
@@ -123,6 +123,7 @@ type Tool interface {
 	ToConfig() ToolConfig
 	GetAuthTokenHeaderName(SourceProvider) (string, error)
 	GetParameters() parameters.Parameters
+	GetScopesRequired() []string
 }
 
 // SourceProvider defines the minimal view of the server.ResourceManager
diff --git a/internal/tools/trino/trinoexecutesql/trinoexecutesql.go b/internal/tools/trino/trinoexecutesql/trinoexecutesql.go
index 26d9629d4da1..28622cd2a2f4 100644
--- a/internal/tools/trino/trinoexecutesql/trinoexecutesql.go
+++ b/internal/tools/trino/trinoexecutesql/trinoexecutesql.go
@@ -56,6 +56,8 @@ type Config struct {
 	Description  string                 `yaml:"description" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -141,3 +143,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/trino/trinosql/trinosql.go b/internal/tools/trino/trinosql/trinosql.go
index 8ef757a5272b..d1c8278e5b8e 100644
--- a/internal/tools/trino/trinosql/trinosql.go
+++ b/internal/tools/trino/trinosql/trinosql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -151,3 +153,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/utility/wait/wait.go b/internal/tools/utility/wait/wait.go
index 02035ca157a3..51de752ef3ec 100644
--- a/internal/tools/utility/wait/wait.go
+++ b/internal/tools/utility/wait/wait.go
@@ -50,6 +50,8 @@ type Config struct {
 	Timeout      string                 `yaml:"timeout" validate:"required"`
 	AuthRequired []string               `yaml:"authRequired"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 var _ tools.ToolConfig = Config{}
@@ -134,3 +136,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/valkey/valkey.go b/internal/tools/valkey/valkey.go
index 0cb7ec356270..5c7a3aec9da2 100644
--- a/internal/tools/valkey/valkey.go
+++ b/internal/tools/valkey/valkey.go
@@ -57,6 +57,8 @@ type Config struct {
 	AuthRequired []string               `yaml:"authRequired"`
 	Parameters   parameters.Parameters  `yaml:"parameters"`
 	Annotations  *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -171,3 +173,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.Parameters
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}
diff --git a/internal/tools/yugabytedbsql/yugabytedbsql.go b/internal/tools/yugabytedbsql/yugabytedbsql.go
index becce2750a39..98f8ef40001f 100644
--- a/internal/tools/yugabytedbsql/yugabytedbsql.go
+++ b/internal/tools/yugabytedbsql/yugabytedbsql.go
@@ -59,6 +59,8 @@ type Config struct {
 	Parameters         parameters.Parameters  `yaml:"parameters"`
 	TemplateParameters parameters.Parameters  `yaml:"templateParameters"`
 	Annotations        *tools.ToolAnnotations `yaml:"annotations,omitempty"`
+
+	ScopesRequired []string `yaml:"scopesRequired"`
 }
 
 // validate interface
@@ -152,3 +154,7 @@ func (t Tool) GetAuthTokenHeaderName(resourceMgr tools.SourceProvider) (string,
 func (t Tool) GetParameters() parameters.Parameters {
 	return t.AllParams
 }
+
+func (t Tool) GetScopesRequired() []string {
+	return t.ScopesRequired
+}