Scope API Tokens to a Single Project
Create API tokens that are locked to one project, so an integration only ever touches the resources you intend.
What's changed
- When creating a token, choose This project only or All my projects — new tokens are locked to the current project by default
- Every token in your list shows its scope at a glance, with the project name on project-locked tokens
- A project-locked token is refused, with a clear message, if it is used against any other project
- Your existing tokens keep working with account-wide access — nothing to change unless you want to tighten them