diff --git a/r2/r2/controllers/api.py b/r2/r2/controllers/api.py
index 1a4f204c1..88106809f 100755
--- a/r2/r2/controllers/api.py
+++ b/r2/r2/controllers/api.py
@@ -962,6 +962,7 @@ class ApiController(RedditController, OAuth2ResourceController):
             jquery(".content").replace_things(item, True, True, wrap = wrapper)
             jquery(".content .link .rank").hide()
 
+    @require_oauth2_scope("comment")
     @validatedForm(VUser(),
                    VModhash(),
                    VRatelimit(rate_user = True, rate_ip = True,
diff --git a/r2/r2/controllers/oauth2.py b/r2/r2/controllers/oauth2.py
index a4e6b40f0..25da67509 100644
--- a/r2/r2/controllers/oauth2.py
+++ b/r2/r2/controllers/oauth2.py
@@ -42,6 +42,11 @@ scope_info = {
         "id": "identity",
         "name": _("My Identity"),
         "description": _("Access my reddit username and signup date.")
+    },
+    "comment": {
+        "id": "comment",
+        "name": _("Commenting"),
+        "description": _("Submit comments from my account.")
     }
 }