How do I set access rights for an API token?

A token never has more rights than the account that created it. What you may read or edit on the website is what your token may read or edit through the API. A role taken from the account is taken from its tokens at the same moment.

Access rights for tokens are set under My Settings, Access. The page lists the roles assigned to your account and the permissions that result from them. Each permission names a resource and one of five actions: list, read, create, update or delete.

Give a token only the rights its job needs. A dashboard that displays heights needs read access and nothing more, and a token limited that way cannot change a record if it leaks. Teams on SKYDB Insights that need rights for several seats can write to [email protected].