diff --git a/Dockerfile b/Dockerfile
index 98754ae..333cf39 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,4 +20,4 @@ ENV HOST=0.0.0.0 \
 
 EXPOSE 8000
 
-CMD ["uv", "run", "mcp-server-appwrite", "--transport", "http"]
+CMD ["uv", "run", "--no-sync", "mcp-server-appwrite", "--transport", "http"]
diff --git a/src/mcp_server_appwrite/constants.py b/src/mcp_server_appwrite/constants.py
index 5ac3207..5501818 100644
--- a/src/mcp_server_appwrite/constants.py
+++ b/src/mcp_server_appwrite/constants.py
@@ -55,8 +55,6 @@
     "profile",
     "email",
     "all",
-    "project:all",
-    "organization:all",
 ]
 
 DISCOVERY_TTL_SECONDS = 300.0
diff --git a/tests/unit/test_auth.py b/tests/unit/test_auth.py
index 439ce33..b69ba5c 100644
--- a/tests/unit/test_auth.py
+++ b/tests/unit/test_auth.py
@@ -92,10 +92,7 @@ def test_advertised_scopes_prefer_curated_subset(self):
             scopes = asyncio.run(auth.protected_resource_metadata())["scopes_supported"]
         finally:
             auth._discovery_cache.pop(pid, None)
-        self.assertEqual(
-            scopes,
-            ["openid", "profile", "email", "all", "project:all", "organization:all"],
-        )
+        self.assertEqual(scopes, ["openid", "profile", "email", "all"])
 
     def test_advertised_scopes_drop_preferred_scopes_missing_from_discovery(self):
         pid = auth.configured_project_id()