Scoped access tokens
Create narrower access for automation than a full administrator account. Capabilities and resource grants control supported operations.
Open the guideHow it works
Choose token capabilities and resource access. Bind credentials to the intended workspace where appropriate and review grants before connecting an SDK client, script, or agent.
Restricted members and scoped tokens enforce action and resource limits. Standard members and administrators are broadly trusted roles, so use explicit grants for integrations needing least privilege.
What you can do
Capability limits
Choose supported read, write, or administration operations.
Resource grants
Restrict access to selected or permitted created resources.
Revocation
Remove credentials when an integration no longer needs access.
Explore more
Ship it your way.
Self-hosted and free, or managed on Openship Cloud — the same workflow either way.