Choose fine-grained Domain Chief token permissions
When creating a personal API token for Domain Chief, you can now choose fine-grained permissions instead of full access. Select only the resources and actions an integration needs, such as reading DNS records. OAuth authorization requests also show the specific Domain Chief permissions being requested.
See How scopes work to choose the right permissions.