I am sorry you’re having trouble. Hubspot is very finicky about the OAuth2 scopes, but your list seems accurate. Is there a chance you have simply mixed up some of the IDs and secrets? Especially the developer API key is easy to mix up with a regular API key (see this post for a screenshot).