drupflare/worker - v1.0.4
    Preparing search index...

    Variable CF_SCOPESConst

    CF_SCOPES: readonly ["user:read", "account:read", "email:read", "email:write"] = ...

    The least scopes that make the mail path work: user:read and account:read identify the account, the email scopes cover POST /accounts/:id/email/sending/send. workers-platform:write is left out so a stolen token cannot rewrite the Worker.