# Enforce scopes the same way on every path

> check_route_scopes now runs identically across JWT, service-account, and MCP paths, and a data-driven get_resource_context_from_path replaces the old hardcoded substring matching.

- Published: 2026-07-07
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/enforce-scopes-the-same-way-on-every-path
- Markdown: https://agno-com-nine.vercel.app/articles/enforce-scopes-the-same-way-on-every-path.md

`check_route_scopes` now runs identically across JWT, service-account, and MCP paths, and a data-driven `get_resource_context_from_path` replaces the old hardcoded substring matching. Access control behaves consistently no matter how a request arrives, so a scope you set means the same thing everywhere.

View the [RBAC Custom Scope Mappings docs](https://docs.agno.com/agent-os/usage/rbac/custom-scope-mappings#custom-scope-mappings) to learn more.