Scoped token
An access token limited to a narrow set of actions or resources rather than everything its owner can do. Examples in ZopNight include the scan token created for infrastructure-as-code checks in CI, which is refused on any route outside its scope, and Atlassian's granular API tokens used to connect Jira. Why it matters: If a narrow token leaks, the attacker gets only that narrow access.
2 lesson references ← Back to glossary
Where it appears
Read the term in context.
Each row is a lesson that uses this term. The lesson where it first appears is the canonical definition.