When Blast Protection asks you to authorize the bot to User Apps, aka My Apps, it is a required prodedure. A bot almost asks just like an actual human account, so if you want to interact (clicking buttons as example) it can’t know that because you don’t share a mutual server.

How to know you’re not being scammed:

• It is necessary to authorize this unless you share a mutual server.
• Check for given permissions, for example, if you are authorizing with dangerous permissions like Join servers for you. Blast Protection only asks for your username, avatar and banner, and to send you Direct Messages.

If you do not wish to authorize, you must join a server with Blast Protection in it to share a mutual server.