# What scopes are needed to access user music data?

**URL:** <https://community.amazondeveloper.com/t/what-scopes-are-needed-to-access-user-music-data/4402>\
**Category:** Amazon Music\
**Created:** [April 11, 2024, 4:55am UTC](https://community.amazondeveloper.com/t/what-scopes-are-needed-to-access-user-music-data/4402 "2024-04-11T04:55:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Logan\_Somoza](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/logan_somoza/32/1206_2.png) [@Logan\_Somoza](https://community.amazondeveloper.com/u/Logan_Somoza)\
**Post date:** [April 11, 2024, 4:55am UTC](https://community.amazondeveloper.com/t/what-scopes-are-needed-to-access-user-music-data/4402/1 "2024-04-11T04:55:22Z")

</div>

I am trying to access a user’s playlists with what I assume is a correct access token(reloaded each time so it is not timing out) and api key but I am still getting a 401, authentication error. I think this is due to my only scope in the authorization process being ‘profile’ but I could not find any other amazon music scopes in the documentation. (other than amazon\_music:access for devices but not web apis) Are there other scopes that I need to include in my scope variable to access a user’s playlists or anything else I may be doing wrong?  
Thank you

I am using code similar to this code(Javascript):

url = ‘[https://api.music.amazon.dev/v1/me/playlists](https://api.music.amazon.dev/v1/me/playlists)’  
options = {  
method: ‘GET’,  
headers: {  
‘x-api-key’: ‘amzn1.application.xxxx’,  
‘Authorization’: ‘Bearer Atza|xxxx’  
}  
}  
response = await fetch(url, options);

---

<div class="post-metadata">

**Author:** ![NV\_SAAmazonMusic](https://avatars.discourse-cdn.com/v4/letter/n/e68b1a/32.png) [@NV\_SAAmazonMusic](https://community.amazondeveloper.com/u/NV_SAAmazonMusic)\
**Post date:** [April 16, 2024, 3:15am UTC](https://community.amazondeveloper.com/t/what-scopes-are-needed-to-access-user-music-data/4402/2 "2024-04-16T03:15:59Z")

</div>

Is you LWA application id safelisted for API access? If not, please submit your request [here](https://developer.amazon.com/support/contact-us)

---

<div class="post-metadata">

**Author:** ![Logan\_Somoza](https://dhm3gbtzu79o6.cloudfront.net/user_avatar/community.amazondeveloper.com/logan_somoza/32/1206_2.png) [@Logan\_Somoza](https://community.amazondeveloper.com/u/Logan_Somoza)\
**Post date:** [April 16, 2024, 7:24am UTC](https://community.amazondeveloper.com/t/what-scopes-are-needed-to-access-user-music-data/4402/3 "2024-04-16T07:24:46Z")

</div>

I do not think that it was safe listed, I have just submitted a request now