diff --git a/js/issuer.js b/js/issuer.js
index 08c630b..438b163 100644
--- a/js/issuer.js
+++ b/js/issuer.js
@@ -106,6 +106,7 @@ $(function () {
     var callbackUrl;
     // TODO put in directives.json or similar
     var grantDescriptions = {
+      // deprecated
       'oauth3_authn': "Basic secure authentication"
     , 'wallet': "Access to payments and subscriptions"
     , 'bucket': "Access to file storage"
@@ -114,6 +115,17 @@ $(function () {
     , 'domains:glue': "Glue Record management (for vanity nameservers)"
     , 'domains:ns': "Name Server management"
     , 'dns': "DNS records (A/AAAA, TXT, SRV, MX, etc)"
+
+      // new
+    , 'hello@example.com': "Hello World Example Access"
+    , 'authn@oauth3.org': "Basic secure authentication"
+    , 'wallet@oauth3.org': "Access to payments and subscriptions"
+    , 'bucket@oauth3.org': "Access to file storage"
+    , 'db@oauth3.org': "Access to app data"
+    , 'domains@oauth3.org': "Domain registration (and Glue and NS records)" // TODO make an alias
+    , 'domains:glue@oauth3.org': "Glue Record management (for vanity nameservers)"
+    , 'domains:ns@oauth3.org': "Name Server management"
+    , 'dns@oauth3.org': "DNS records (A/AAAA, TXT, SRV, MX, etc)"
     , '*': "FULL ACCOUNT ACCESS"
     };