Identity & Access
Scoped Token
Also: fine-grained token, restricted token
A credential limited to specific resources and actions, such as read access to one repository.
In more detail
Prefer a scoped token over a broad personal one whenever an agent or integration needs access. If it leaks, the damage is bounded to what the scope allows.