diff --git a/server/index.js b/server/index.js
index 6b3acbe..8c78f00 100644
--- a/server/index.js
+++ b/server/index.js
@@ -49,6 +49,8 @@ const scopes = [
   'delete:grants',
   'read:guardian_factors',
   'update:guardian_factors',
+  'read:mfa_policies',
+  'update:mfa_policies',
   'read:email_templates',
   'create:email_templates',
   'update:email_templates'
diff --git a/webtask.json b/webtask.json
index f32cf19..11e78de 100644
--- a/webtask.json
+++ b/webtask.json
@@ -21,6 +21,6 @@
   "auth0": {
     "createClient": true,
     "onUninstallPath": "/.extensions/on-uninstall",
-    "scopes": "read:client_grants create:client_grants delete:client_grants update:client_grants read:clients update:clients delete:clients create:clients read:client_keys update:client_keys delete:client_keys create:client_keys read:connections update:connections delete:connections create:connections read:resource_servers update:resource_servers delete:resource_servers create:resource_servers read:rules update:rules delete:rules create:rules read:rules_configs update:rules_configs delete:rules_configs read:email_provider update:email_provider delete:email_provider create:email_provider read:tenant_settings update:tenant_settings read:grants delete:grants read:guardian_factors update:guardian_factors read:email_templates create:email_templates update:email_templates read:roles update:roles delete:roles create:roles read:prompts update:prompts read:branding update:branding read:hooks update:hooks delete:hooks create:hooks"
+    "scopes": "read:client_grants create:client_grants delete:client_grants update:client_grants read:clients update:clients delete:clients create:clients read:client_keys update:client_keys delete:client_keys create:client_keys read:connections update:connections delete:connections create:connections read:resource_servers update:resource_servers delete:resource_servers create:resource_servers read:rules update:rules delete:rules create:rules read:rules_configs update:rules_configs delete:rules_configs read:email_provider update:email_provider delete:email_provider create:email_provider read:tenant_settings update:tenant_settings read:grants delete:grants read:guardian_factors update:guardian_factors read:mfa_policies update:mfa_policies read:email_templates create:email_templates update:email_templates read:roles update:roles delete:roles create:roles read:prompts update:prompts read:branding update:branding read:hooks update:hooks delete:hooks create:hooks"
   }
 }