Choose send-only access when it is enough
The gmail.send scope can authorize sending without general mailbox reading. Draft management, replies using stored context, or mailbox synchronization may require additional scopes and a different Google verification burden.