diff --git a/.config/rollup.dist.config.mjs b/.config/rollup.dist.config.mjs
index 647537ea0..79ecbc335 100644
--- a/.config/rollup.dist.config.mjs
+++ b/.config/rollup.dist.config.mjs
@@ -107,13 +107,13 @@ async function copyBlessedWidgets() {
   const blessedDestPath = path.join(rootDistPath, 'blessed')
   const blessedNmPath = path.join(rootPath, 'node_modules/blessed')
   const folders = ['lib', 'usr', 'vendor']
-  await Promise.all([
-    ...folders.map(f =>
+  await Promise.all(
+    folders.map(f =>
       fs.cp(path.join(blessedNmPath, f), path.join(blessedDestPath, f), {
         recursive: true
       })
     )
-  ])
+  )
   // Add 'use strict' directive to js files.
   const jsFiles = await tinyGlob(['**/*.js'], {
     absolute: true,
diff --git a/src/commands/analytics/cmd-analytics.test.ts b/src/commands/analytics/cmd-analytics.test.ts
index de6c487e2..14fc1883f 100644
--- a/src/commands/analytics/cmd-analytics.test.ts
+++ b/src/commands/analytics/cmd-analytics.test.ts
@@ -23,6 +23,10 @@ describe('socket analytics', async () => {
           Usage
             $ socket analytics --scope=<scope> --time=<time filter>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: report:write
+
           Default parameters are set to show the organization-level analytics over the
           last 7 days.
 
diff --git a/src/commands/analytics/cmd-analytics.ts b/src/commands/analytics/cmd-analytics.ts
index e70817774..026bb926c 100644
--- a/src/commands/analytics/cmd-analytics.ts
+++ b/src/commands/analytics/cmd-analytics.ts
@@ -52,6 +52,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} --scope=<scope> --time=<time filter>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: report:write
+
     Default parameters are set to show the organization-level analytics over the
     last 7 days.
 
diff --git a/src/commands/audit-log/cmd-audit-log.test.ts b/src/commands/audit-log/cmd-audit-log.test.ts
index c4184f3f1..209e6f39f 100644
--- a/src/commands/audit-log/cmd-audit-log.test.ts
+++ b/src/commands/audit-log/cmd-audit-log.test.ts
@@ -23,6 +23,10 @@ describe('socket audit-log', async () => {
           Usage
             $ socket audit-log <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: audit-log:list
+
           This feature requires an Enterprise Plan. To learn more about getting access
           to this feature and many more, please visit https://socket.dev/pricing
 
diff --git a/src/commands/audit-log/cmd-audit-log.ts b/src/commands/audit-log/cmd-audit-log.ts
index a80225c67..689a130f5 100644
--- a/src/commands/audit-log/cmd-audit-log.ts
+++ b/src/commands/audit-log/cmd-audit-log.ts
@@ -43,6 +43,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: audit-log:list
+
     This feature requires an Enterprise Plan. To learn more about getting access
     to this feature and many more, please visit https://socket.dev/pricing
 
diff --git a/src/commands/dependencies/cmd-dependencies.test.ts b/src/commands/dependencies/cmd-dependencies.test.ts
index 75db09495..84830345c 100644
--- a/src/commands/dependencies/cmd-dependencies.test.ts
+++ b/src/commands/dependencies/cmd-dependencies.test.ts
@@ -23,6 +23,10 @@ describe('socket dependencies', async () => {
           Usage
             socket dependencies
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: none (does need token with access to target org)
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/dependencies/cmd-dependencies.ts b/src/commands/dependencies/cmd-dependencies.ts
index ff86de9c5..932d61cb6 100644
--- a/src/commands/dependencies/cmd-dependencies.ts
+++ b/src/commands/dependencies/cmd-dependencies.ts
@@ -37,6 +37,10 @@ const config: CliCommandConfig = {
     Usage
       ${command}
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: none (does need token with access to target org)
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/diff-scan/cmd-diff-scan-get.test.ts b/src/commands/diff-scan/cmd-diff-scan-get.test.ts
index 172a25df5..c1976b866 100644
--- a/src/commands/diff-scan/cmd-diff-scan-get.test.ts
+++ b/src/commands/diff-scan/cmd-diff-scan-get.test.ts
@@ -23,6 +23,10 @@ describe('socket diff-scan get', async () => {
           Usage
             $ socket diff-scan get <org slug> --before=<before> --after=<after>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:list
+
           This command displays the package changes between two scans. The full output
           can be pretty large depending on the size of your repo and time range. It is
           best stored to disk to be further analyzed by other tools.
diff --git a/src/commands/diff-scan/cmd-diff-scan-get.ts b/src/commands/diff-scan/cmd-diff-scan-get.ts
index fc1772e2f..404cb6ca6 100644
--- a/src/commands/diff-scan/cmd-diff-scan-get.ts
+++ b/src/commands/diff-scan/cmd-diff-scan-get.ts
@@ -56,6 +56,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> --before=<before> --after=<after>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:list
+
     This command displays the package changes between two scans. The full output
     can be pretty large depending on the size of your repo and time range. It is
     best stored to disk to be further analyzed by other tools.
diff --git a/src/commands/login/cmd-login.test.ts b/src/commands/login/cmd-login.test.ts
index ee04be938..098d947bd 100644
--- a/src/commands/login/cmd-login.test.ts
+++ b/src/commands/login/cmd-login.test.ts
@@ -23,6 +23,9 @@ describe('socket login', async () => {
           Usage
             $ socket login
 
+          API Token Requirements
+            - Quota: 1 unit
+
           Logs into the Socket API by prompting for an API key
 
           Options
diff --git a/src/commands/login/cmd-login.ts b/src/commands/login/cmd-login.ts
index 34cf0dc38..4871b15a7 100644
--- a/src/commands/login/cmd-login.ts
+++ b/src/commands/login/cmd-login.ts
@@ -31,6 +31,9 @@ const config: CliCommandConfig = {
     Usage
       $ ${command}
 
+    API Token Requirements
+      - Quota: 1 unit
+
     Logs into the Socket API by prompting for an API key
 
     Options
diff --git a/src/commands/organization/cmd-organization-list.test.ts b/src/commands/organization/cmd-organization-list.test.ts
index 6efd0624a..3d2bffb56 100644
--- a/src/commands/organization/cmd-organization-list.test.ts
+++ b/src/commands/organization/cmd-organization-list.test.ts
@@ -23,6 +23,10 @@ describe('socket organization list', async () => {
           Usage
             $ socket organization list
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: none (does need a token)
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/organization/cmd-organization-list.ts b/src/commands/organization/cmd-organization-list.ts
index 4120f9159..ad0d3b8bb 100644
--- a/src/commands/organization/cmd-organization-list.ts
+++ b/src/commands/organization/cmd-organization-list.ts
@@ -24,6 +24,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command}
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: none (does need a token)
+
     Options
       ${getFlagListOutput(config.flags, 6)}
   `
diff --git a/src/commands/organization/cmd-organization-policy-license.test.ts b/src/commands/organization/cmd-organization-policy-license.test.ts
index c6403c644..030d7f220 100644
--- a/src/commands/organization/cmd-organization-policy-license.test.ts
+++ b/src/commands/organization/cmd-organization-policy-license.test.ts
@@ -23,6 +23,10 @@ describe('socket organization policy license', async () => {
           Usage
             $ socket organization policy license <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: license-policy:read
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/organization/cmd-organization-policy-license.ts b/src/commands/organization/cmd-organization-policy-license.ts
index b90b6c95e..ddcc21f3c 100644
--- a/src/commands/organization/cmd-organization-policy-license.ts
+++ b/src/commands/organization/cmd-organization-policy-license.ts
@@ -26,6 +26,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: license-policy:read
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/organization/cmd-organization-policy-security.test.ts b/src/commands/organization/cmd-organization-policy-security.test.ts
index 30039b91e..cb7807d52 100644
--- a/src/commands/organization/cmd-organization-policy-security.test.ts
+++ b/src/commands/organization/cmd-organization-policy-security.test.ts
@@ -23,6 +23,10 @@ describe('socket organization policy security', async () => {
           Usage
             $ socket organization policy security <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: security-policy:read
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/organization/cmd-organization-policy-security.ts b/src/commands/organization/cmd-organization-policy-security.ts
index 041c4f14a..add73e5ca 100644
--- a/src/commands/organization/cmd-organization-policy-security.ts
+++ b/src/commands/organization/cmd-organization-policy-security.ts
@@ -26,6 +26,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: security-policy:read
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/package/cmd-package-score.test.ts b/src/commands/package/cmd-package-score.test.ts
index dc81f4dc1..31e4c7276 100644
--- a/src/commands/package/cmd-package-score.test.ts
+++ b/src/commands/package/cmd-package-score.test.ts
@@ -23,16 +23,16 @@ describe('socket package score', async () => {
           Usage
             $ socket package score <<ecosystem> <name> | <purl>>
 
+          API Token Requirements
+            - Quota: 100 units
+            - Permissions: packages:list
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
             --json            Output result as json
             --markdown        Output result as markdown
 
-          Requirements
-            - quota: 100
-            - scope: \`packages:list\`
-
           Show deep scoring details for one package. The score will reflect the package
           itself, any of its dependencies, and any of its transitive dependencies.
 
diff --git a/src/commands/package/cmd-package-score.ts b/src/commands/package/cmd-package-score.ts
index e94e7af66..e05423081 100644
--- a/src/commands/package/cmd-package-score.ts
+++ b/src/commands/package/cmd-package-score.ts
@@ -26,13 +26,13 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <<ecosystem> <name> | <purl>>
 
+    API Token Requirements
+      - Quota: 100 units
+      - Permissions: packages:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
-    Requirements
-      - quota: 100
-      - scope: \`packages:list\`
-
     Show deep scoring details for one package. The score will reflect the package
     itself, any of its dependencies, and any of its transitive dependencies.
 
diff --git a/src/commands/package/cmd-package-shallow.test.ts b/src/commands/package/cmd-package-shallow.test.ts
index d2797a5e4..fe859b073 100644
--- a/src/commands/package/cmd-package-shallow.test.ts
+++ b/src/commands/package/cmd-package-shallow.test.ts
@@ -23,16 +23,16 @@ describe('socket package shallow', async () => {
           Usage
             $ socket package shallow <<ecosystem> <name> [<name> ...] | <purl> [<purl> ...]>
 
+          API Token Requirements
+            - Quota: 100 units
+            - Permissions: packages:list
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
             --json            Output result as json
             --markdown        Output result as markdown
 
-          Requirements
-            - quota: 100
-            - scope: \`packages:list\`
-
           Show scoring details for one or more packages purely based on their own package.
           This means that any dependency scores are not reflected by the score. You can
           use the \`socket package score <pkg>\` command to get its full transitive score.
diff --git a/src/commands/package/cmd-package-shallow.ts b/src/commands/package/cmd-package-shallow.ts
index bf4392ea5..7d03f1f1d 100644
--- a/src/commands/package/cmd-package-shallow.ts
+++ b/src/commands/package/cmd-package-shallow.ts
@@ -25,13 +25,13 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <<ecosystem> <name> [<name> ...] | <purl> [<purl> ...]>
 
+    API Token Requirements
+      - Quota: 100 units
+      - Permissions: packages:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
-    Requirements
-      - quota: 100
-      - scope: \`packages:list\`
-
     Show scoring details for one or more packages purely based on their own package.
     This means that any dependency scores are not reflected by the score. You can
     use the \`socket package score <pkg>\` command to get its full transitive score.
diff --git a/src/commands/repos/cmd-repos-create.test.ts b/src/commands/repos/cmd-repos-create.test.ts
index 0761c364e..63af91f9e 100644
--- a/src/commands/repos/cmd-repos-create.test.ts
+++ b/src/commands/repos/cmd-repos-create.test.ts
@@ -23,6 +23,10 @@ describe('socket repos create', async () => {
           Usage
             $ socket repos create <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: repo:create
+
           Options
             --defaultBranch   Repository default branch
             --dryRun          Do input validation for a command and exit 0 when input is ok
diff --git a/src/commands/repos/cmd-repos-create.ts b/src/commands/repos/cmd-repos-create.ts
index f8d121dd6..85fb5e031 100644
--- a/src/commands/repos/cmd-repos-create.ts
+++ b/src/commands/repos/cmd-repos-create.ts
@@ -54,6 +54,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: repo:create
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/repos/cmd-repos-del.test.ts b/src/commands/repos/cmd-repos-del.test.ts
index 8969a8df3..a1bc44c8a 100644
--- a/src/commands/repos/cmd-repos-del.test.ts
+++ b/src/commands/repos/cmd-repos-del.test.ts
@@ -23,6 +23,10 @@ describe('socket repos del', async () => {
           Usage
             $ socket repos del <org slug> <repo slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: repo:delete
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/repos/cmd-repos-del.ts b/src/commands/repos/cmd-repos-del.ts
index 0df2cf8dc..5faff6afa 100644
--- a/src/commands/repos/cmd-repos-del.ts
+++ b/src/commands/repos/cmd-repos-del.ts
@@ -24,6 +24,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> <repo slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: repo:delete
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/repos/cmd-repos-list.test.ts b/src/commands/repos/cmd-repos-list.test.ts
index 03fc2c8e4..946e98beb 100644
--- a/src/commands/repos/cmd-repos-list.test.ts
+++ b/src/commands/repos/cmd-repos-list.test.ts
@@ -23,6 +23,10 @@ describe('socket repos list', async () => {
           Usage
             $ socket repos list <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: repo:list
+
           Options
             --direction       Direction option
             --dryRun          Do input validation for a command and exit 0 when input is ok
diff --git a/src/commands/repos/cmd-repos-list.ts b/src/commands/repos/cmd-repos-list.ts
index 6937ba5c2..070fccaf9 100644
--- a/src/commands/repos/cmd-repos-list.ts
+++ b/src/commands/repos/cmd-repos-list.ts
@@ -48,6 +48,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: repo:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/repos/cmd-repos-update.test.ts b/src/commands/repos/cmd-repos-update.test.ts
index 0e5eac834..026ad07a1 100644
--- a/src/commands/repos/cmd-repos-update.test.ts
+++ b/src/commands/repos/cmd-repos-update.test.ts
@@ -23,6 +23,10 @@ describe('socket repos update', async () => {
           Usage
             $ socket repos update <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: repo:update
+
           Options
             --defaultBranch   Repository default branch
             --dryRun          Do input validation for a command and exit 0 when input is ok
diff --git a/src/commands/repos/cmd-repos-update.ts b/src/commands/repos/cmd-repos-update.ts
index b0b1c2a48..757148957 100644
--- a/src/commands/repos/cmd-repos-update.ts
+++ b/src/commands/repos/cmd-repos-update.ts
@@ -54,6 +54,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: repo:update
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/repos/cmd-repos-view.test.ts b/src/commands/repos/cmd-repos-view.test.ts
index 5e953d2b9..de8f8656c 100644
--- a/src/commands/repos/cmd-repos-view.test.ts
+++ b/src/commands/repos/cmd-repos-view.test.ts
@@ -23,6 +23,10 @@ describe('socket repos view', async () => {
           Usage
             $ socket repos view <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: repo:list
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/repos/cmd-repos-view.ts b/src/commands/repos/cmd-repos-view.ts
index bb0377505..48fa8d9a6 100644
--- a/src/commands/repos/cmd-repos-view.ts
+++ b/src/commands/repos/cmd-repos-view.ts
@@ -30,6 +30,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: repo:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/scan/cmd-scan-create.test.ts b/src/commands/scan/cmd-scan-create.test.ts
index 8dba19e9e..4d947e502 100644
--- a/src/commands/scan/cmd-scan-create.test.ts
+++ b/src/commands/scan/cmd-scan-create.test.ts
@@ -22,6 +22,10 @@ describe('socket scan create', async () => {
           Usage
             $ socket scan create [...options] <org> <TARGET> [TARGET...]
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:create
+
           Uploads the specified "package.json" and lock files for JavaScript, Python,
           Go, Scala, Gradle, and Kotlin dependency manifests.
           If any folder is specified, the ones found in there recursively are uploaded.
diff --git a/src/commands/scan/cmd-scan-create.ts b/src/commands/scan/cmd-scan-create.ts
index d2cc02807..acffc18e4 100644
--- a/src/commands/scan/cmd-scan-create.ts
+++ b/src/commands/scan/cmd-scan-create.ts
@@ -105,6 +105,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} [...options] <org> <TARGET> [TARGET...]
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:create
+
     Uploads the specified "package.json" and lock files for JavaScript, Python,
     Go, Scala, Gradle, and Kotlin dependency manifests.
     If any folder is specified, the ones found in there recursively are uploaded.
diff --git a/src/commands/scan/cmd-scan-del.test.ts b/src/commands/scan/cmd-scan-del.test.ts
index 9cc082e09..760bd430b 100644
--- a/src/commands/scan/cmd-scan-del.test.ts
+++ b/src/commands/scan/cmd-scan-del.test.ts
@@ -23,6 +23,10 @@ describe('socket scan del', async () => {
           Usage
             $ socket scan del <org slug> <scan ID>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:delete
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/scan/cmd-scan-del.ts b/src/commands/scan/cmd-scan-del.ts
index 66d20521d..ee91adb95 100644
--- a/src/commands/scan/cmd-scan-del.ts
+++ b/src/commands/scan/cmd-scan-del.ts
@@ -25,6 +25,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> <scan ID>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:delete
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/scan/cmd-scan-list.test.ts b/src/commands/scan/cmd-scan-list.test.ts
index 02d851c12..1865341e4 100644
--- a/src/commands/scan/cmd-scan-list.test.ts
+++ b/src/commands/scan/cmd-scan-list.test.ts
@@ -23,6 +23,10 @@ describe('socket scan list', async () => {
           Usage
             $ socket scan list <org slug>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:list
+
           Options
             --direction       Direction option (\`desc\` or \`asc\`) - Default is \`desc\`
             --dryRun          Do input validation for a command and exit 0 when input is ok
diff --git a/src/commands/scan/cmd-scan-list.ts b/src/commands/scan/cmd-scan-list.ts
index 0f5fcf7b0..2f35c643f 100644
--- a/src/commands/scan/cmd-scan-list.ts
+++ b/src/commands/scan/cmd-scan-list.ts
@@ -65,6 +65,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/scan/cmd-scan-metadata.test.ts b/src/commands/scan/cmd-scan-metadata.test.ts
index 3654894b9..47f259e7c 100644
--- a/src/commands/scan/cmd-scan-metadata.test.ts
+++ b/src/commands/scan/cmd-scan-metadata.test.ts
@@ -23,6 +23,10 @@ describe('socket scan metadata', async () => {
           Usage
             $ socket scan metadata <org slug> <scan id>
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:list
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
diff --git a/src/commands/scan/cmd-scan-metadata.ts b/src/commands/scan/cmd-scan-metadata.ts
index 13c109ecf..6a291d458 100644
--- a/src/commands/scan/cmd-scan-metadata.ts
+++ b/src/commands/scan/cmd-scan-metadata.ts
@@ -28,6 +28,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> <scan id>
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:list
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
diff --git a/src/commands/scan/cmd-scan-report.test.ts b/src/commands/scan/cmd-scan-report.test.ts
index ade60500e..6f3c4fa1a 100644
--- a/src/commands/scan/cmd-scan-report.test.ts
+++ b/src/commands/scan/cmd-scan-report.test.ts
@@ -23,6 +23,10 @@ describe('socket scan report', async () => {
           Usage
             $ socket scan report <org slug> <scan ID> [path to output file]
 
+          API Token Requirements
+            - Quota: 3 units
+            - Permissions: full-scans:list security-policy:read
+
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --fold            Fold reported alerts to some degree
@@ -33,13 +37,6 @@ describe('socket scan report', async () => {
             --security        Report the security policy status. Default: true
             --short           Report only the healthy status
 
-          This consumes 1 quota unit plus 1 for each of the requested policy types.
-
-          Note: By default it reports both so by default it consumes 3 quota units.
-
-          Your API token will need the \`full-scans:list\` scope regardless. Additionally
-          it needs \`security-policy:read\` to report on the security policy.
-
           By default the result is a nested object that looks like this:
             \`{[ecosystem]: {[pkgName]: {[version]: {[file]: {[type:loc]: policy}}}}\`
           You can fold this up to given level: 'pkg', 'version', 'file', and 'none'.
diff --git a/src/commands/scan/cmd-scan-report.ts b/src/commands/scan/cmd-scan-report.ts
index a61607857..a84854ef3 100644
--- a/src/commands/scan/cmd-scan-report.ts
+++ b/src/commands/scan/cmd-scan-report.ts
@@ -54,16 +54,13 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> <scan ID> [path to output file]
 
+    API Token Requirements
+      - Quota: 3 units
+      - Permissions: full-scans:list security-policy:read
+
     Options
       ${getFlagListOutput(config.flags, 6)}
 
-    This consumes 1 quota unit plus 1 for each of the requested policy types.
-
-    Note: By default it reports both so by default it consumes 3 quota units.
-
-    Your API token will need the \`full-scans:list\` scope regardless. Additionally
-    it needs \`security-policy:read\` to report on the security policy.
-
     By default the result is a nested object that looks like this:
       \`{[ecosystem]: {[pkgName]: {[version]: {[file]: {[type:loc]: policy}}}}\`
     You can fold this up to given level: 'pkg', 'version', 'file', and 'none'.
diff --git a/src/commands/scan/cmd-scan-view.test.ts b/src/commands/scan/cmd-scan-view.test.ts
index 970b5a5fb..b30bd036c 100644
--- a/src/commands/scan/cmd-scan-view.test.ts
+++ b/src/commands/scan/cmd-scan-view.test.ts
@@ -23,6 +23,10 @@ describe('socket scan view', async () => {
           Usage
             $ socket scan view <org slug> <scan ID> [path to output file]
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: full-scans:list
+
           When no output path is given the contents is sent to stdout.
 
           Options
diff --git a/src/commands/scan/cmd-scan-view.ts b/src/commands/scan/cmd-scan-view.ts
index db3d5ff59..d1b4c9dc8 100644
--- a/src/commands/scan/cmd-scan-view.ts
+++ b/src/commands/scan/cmd-scan-view.ts
@@ -29,6 +29,10 @@ const config: CliCommandConfig = {
     Usage
       $ ${command} <org slug> <scan ID> [path to output file]
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: full-scans:list
+
     When no output path is given the contents is sent to stdout.
 
     Options
diff --git a/src/commands/threat-feed/cmd-threat-feed.test.ts b/src/commands/threat-feed/cmd-threat-feed.test.ts
index e7ba37728..0c17f21b4 100644
--- a/src/commands/threat-feed/cmd-threat-feed.test.ts
+++ b/src/commands/threat-feed/cmd-threat-feed.test.ts
@@ -23,6 +23,11 @@ describe('socket threat-feed', async () => {
           Usage
             $ socket threat-feed
 
+          API Token Requirements
+            - Quota: 1 unit
+            - Permissions: threat-feed:list
+            - Special access
+
           This feature requires a Threat Feed license. Please contact
           sales@socket.dev if you are interested in purchasing this access.
 
diff --git a/src/commands/threat-feed/cmd-threat-feed.ts b/src/commands/threat-feed/cmd-threat-feed.ts
index eb39a8832..960825d19 100644
--- a/src/commands/threat-feed/cmd-threat-feed.ts
+++ b/src/commands/threat-feed/cmd-threat-feed.ts
@@ -55,6 +55,11 @@ const config: CliCommandConfig = {
     Usage
       $ ${command}
 
+    API Token Requirements
+      - Quota: 1 unit
+      - Permissions: threat-feed:list
+      - Special access
+
     This feature requires a Threat Feed license. Please contact
     sales@socket.dev if you are interested in purchasing this access.