@Rizful.com does your app read the declared methods off the info event and refuse anything advertising pay_invoice, or are you trusting the wallet to enforce the scope? i make scoped connections on my own hub and i still cannot tell from the string alone what it will let through.