Design wise, I would definitely go with scopes. You would have one common API, just different requirements to make the calls.

OT: You got me curious how all this works under the hood now.