diff --git a/app/views/api/v1/models/_app.json.jbuilder b/app/views/api/v1/models/_app.json.jbuilder
index 42539a093..32d3a0cbf 100644
--- a/app/views/api/v1/models/_app.json.jbuilder
+++ b/app/views/api/v1/models/_app.json.jbuilder
@@ -4,7 +4,7 @@ json.description resource.description
 json.short_description resource.short_description.presence
 json.enabled resource.enabled?(@current_account)
 
-if Current.account_user&.administrator?
+if Current.account_user&.administrator? && @access_token&.scope != 'read_only'
   json.call(resource.params, *resource.params.keys)
   json.action resource.action
   json.button resource.action