diff --git a/src/rapidata/rapidata_client/rapidata_client.py b/src/rapidata/rapidata_client/rapidata_client.py
index 2546f50ad..e9e15d916 100644
--- a/src/rapidata/rapidata_client/rapidata_client.py
+++ b/src/rapidata/rapidata_client/rapidata_client.py
@@ -67,7 +67,7 @@ def __init__(
         client_id: str | None = None,
         client_secret: str | None = None,
         environment: str | None = None,
-        oauth_scope: str = "openid roles email",
+        oauth_scope: str = "openid roles email api",
         cert_path: str | None = None,
         token: dict | None = None,
         leeway: int = 60,
@@ -171,9 +171,7 @@ def __init__(
             self.mri = RapidataBenchmarkManager(openapi_service=self._openapi_service)
 
             logger.debug("Initializing RapidataSignalManager")
-            self.signals = RapidataSignalManager(
-                openapi_service=self._openapi_service
-            )
+            self.signals = RapidataSignalManager(openapi_service=self._openapi_service)
 
             logger.debug("Initializing RapidataAudienceManager")
             self.audience = RapidataAudienceManager(
diff --git a/src/rapidata/service/credential_manager.py b/src/rapidata/service/credential_manager.py
index ae007bf5c..91aa84e90 100644
--- a/src/rapidata/service/credential_manager.py
+++ b/src/rapidata/service/credential_manager.py
@@ -268,7 +268,7 @@ def _create_new_credentials(self) -> Optional[ClientCredential]:
         if not bridge_endpoint:
             return None
 
-        auth_url = f"{self.endpoint}/connect/authorize/external?clientId=rapidata-cli&scope=openid profile email roles&writeKey={bridge_endpoint.write_key}"
+        auth_url = f"{self.endpoint}/connect/authorize/external?clientId=rapidata-cli&scope=openid profile email roles api&writeKey={bridge_endpoint.write_key}"
         could_open_browser = webbrowser.open(auth_url)
 
         if not could_open_browser: