diff --git a/pkg/auth/oauth/client.go b/pkg/auth/oauth/client.go
index 9236077..e7e5ad3 100644
--- a/pkg/auth/oauth/client.go
+++ b/pkg/auth/oauth/client.go
@@ -134,13 +134,7 @@ func GetDefaultScopes(did string, testMode bool) []string {
 		"blob:application/vnd.cncf.oras.artifact.manifest.v1+json",
 	}
 	
-	scopes = append(scopes, "transition:generic")
-
-	// In test mode: use transition:generic (local dev with test PDS)
-	// In production: use rpc scope for service auth
-	if !testMode {
-		scopes = append(scopes, fmt.Sprintf("rpc:com.atproto.repo.getRecord?aud=%s#atcr_hold", did))
-	}
+	scopes = append(scopes, fmt.Sprintf("rpc:com.atproto.repo.getRecord?aud=%s", "*"))
 
 	// Add repo scopes
 	scopes = append(scopes,