Where you see it
Your server, onPOST /client-sessions.
What it means
The body has noscope, or a scope that names nothing.
A client session may only reach what its scope names, and there is no scope for “everything”. Name at least one of:
chargerssiteslocationnew_site: true
What to do
Build the scope from the action your app opens, which the SDK passes to yourfetchClientSecret callback:
See Client sessions and scopes.