Personal access tokens
Your tokens
One row per token, with everything it may doWhat these are
Scopes
The complete list of what a token may do. It can do nothing else with this account,
whatever is asked of it, and it can never do more than you can — a scope ending in
:read cannot change anything.
Shown once
The token itself appears exactly once, when it is cut. Nothing keeps a copy — the string is its own storage key — so this page can list what a token may do and never show you the token. Lose it and cut another.
What they cannot do
Manage credentials. A token cannot cut another, widen itself, or revoke the ones beside it — that is why this page needs you to be signed in rather than holding a key.
Revoke
Takes the access away now. Anything using that token starts failing immediately, rather than at the end of whatever it was doing.