Project-scoped Tokens
By Steven Van ·
Vercel Access Tokens can now be limited to a single project, blocking access to other projects and to user- or team-level resources.
Vercel access tokens can now be scoped to a single project. A project-scoped token can only read and write resources that belong to the project it's tied to; requests against any other project, or against user-level or team-level resources, are denied. That means a job, tool, or workflow given one of these tokens can't reach past the project it was issued for.
To create one, go to the Account Tokens page under Settings, name the token, open the Scope dropdown and choose the team that owns the project, then select the project itself, set an expiration, and click Create. The token is shown only once, so it needs to be saved when created. Read the full announcement for details.
