# Next-gen API v1.27

## Email API token scopes

A personal access token created with, or narrowed to, `emailapi:send` alone no longer also gets `emailapi:read`. To read sent emails, add `emailapi:read`, or use the broad `emailapi` scope, which grants both. Other scopes are unchanged: `campaigns:send` still includes `campaigns:read`.

## Error responses

- `POST /v2/emails` now documents its `401` response.
- The `400` error schema now documents the numeric `code` that each error can carry.

## Fixes

- `GET /v2/emails/{email_id}` no longer returns a `500` for an email sent without tags.
- A user created in a sub-account now gets its default role in that sub-account.