Project-scoped Tokens
You can now create Vercel Access Tokens limited to a specific project, allowing you to authenticate with the Vercel API while restricting access to only resources within that project. This improves security by ensuring jobs, tools, and workflows can only access their designated projects.
You can now create that are limited to a project to authenticate and use the .Vercel Access TokensVercel API
A project-scoped token can only read and write resources belonging to a project that the token is scoped to. Requests to any other project, a user-level resource, or a team-level resource will be denied. This ensures jobs, tools, or workflows only ever access the projects they are scoped to.
Navigate to the , found under the area of your Account.Account Tokens pageSettings
Creating a project-scoped token
Enter a descriptive token name
and select the team that owns the project, then click the team to drill into its list of projectsOpen the Scopedropdown
you want the token to be limited toSelect the project
and Choose an expiration click Create
Make a note of the token created as it will not be shown again
Source: original entry ↗