Tokens, scopes, and security
How pat-isms tokens work: scopes, revoke, expiry, and hard limits.
Account tokens let an MCP client act as your user, limited by the scopes you selected when the token was created.
Prefix and lifecycle
| Step | Behaviour |
|---|---|
| Create | Settings → Connected apps → Create token |
| Display | Full secret shown once; starts with pat-isms- |
| Store | Client config only; never commit to git |
| Revoke | Same Settings page; takes effect immediately |
| Expiry | Optional at creation |
Scopes (typical)
Exact labels in the UI may vary slightly; the intent is:
Account
| Capability | Read | Write / act |
|---|---|---|
| Account info | yes | no |
| Workspaces | list | no |
| Documents | list metadata only (no get-by-ID tool) | no |
| Memories | yes | create / edit when granted |
| Conversations | n/a | start and send when granted |
Model API (Connected apps group)
| Scope | Purpose |
|---|---|
api_keys:read | List sk-isms key metadata (no secrets) |
api_keys:write | Create / revoke sk-isms keys via MCP when the keys flag is on |
api_credits:read | Read prepaid API credit balance |
api_credits:checkout | Create a Stripe Checkout URL for top-up when the checkout flag is on |
These scopes do not let a pat-isms call inference. The agent still uses a separate sk-isms key for api.ismscopilot.com. See Set up from Claude Code or Grok.
Grant the minimum set for the agent’s job. A read-only workspace token cannot start conversations.
Hard limits (by design)
- Beyond mode is not available over MCP. Use the web app.
- Advanced Data Protection cannot be toggled via the token. The agent can report status; you change it in Settings → Data Protection.
- Rate limits apply (on the order of ~120 requests/minute per token; concurrent conversations are capped per account). If you hit limits, back off and retry.
pat-ismsalone does not run model-API completions. Model API tools (when enabled) mintsk-ismsand open credit checkout; Embed partner billing stays separate.
Security checklist
- Name tokens by device or purpose (
claude-laptop,cursor-ci). - Prefer short expiry for temporary machines.
- Revoke when a laptop is lost or a CI secret rotates.
- Never put
pat-isms-…in public repos, screenshots, or support tickets.
Usage counts against your normal chat subscription and plan limits, not against API prepaid credits.