Oct 8
Scoped tokens — one credential, one customer
Restrict any API token or team member to a set of Customers or Instances, enforced on every read and write. A credential shipped inside a customer’s perimeter, or into a browser, can never reach another customer’s data. The blast radius of a leaked token becomes one Instance instead of your whole organization.
Reviewing