You must use your own OAuth application, specifying its client ID and secret, in order to specify scopes.
If you're having trouble resolving this error, please reach out to support@ngrok.com.