diff --git a/atproto/auth/oauth/doc.go b/atproto/auth/oauth/doc.go
index 85b70d25..ec7f5887 100644
--- a/atproto/auth/oauth/doc.go
+++ b/atproto/auth/oauth/doc.go
@@ -20,7 +20,7 @@ Create a single [ClientApp] instance during service setup that will be used (con
 	config := oauth.NewPublicConfig(
 		"https://app.example.com/client-metadata.json",
 		"https://app.example.com/oauth/callback",
-		[]string{"atproto", "transition:generic"},
+		[]string{"atproto", "repo:app.bsky.feed.post?action=create"},
 	)
 
 	// clients are "public" by default, but if they have secure access to a secret attestation key can be "confidential"