Issue a token for a script, integration, or CLI. Scope it tightly.
For your own bookkeeping — visible to admins only.
Pick the smallest set this key actually needs.
List and read project metadata.
List members and their roles.
Read the last 90 days of activity.
Create, update, and archive projects.
Invite, remove, and change roles.