Assign only the scopes a key needs when creating it in the Customer Portal. A plan may also restrict which scopes can be assigned at all. Every scope used anywhere on this page (ip.check, asn.check, email.check, phone.check, domain.check, url.check, dns.check, bot.check, device.check, risk.check, interaction.check, interaction.session, lists.read, lists.write, report.submit, report.fetch, account, screen.check, screen.feedback) is real and enforced — see the full table at /docs#scopes.