# Scoped personal access tokens are now generally available

> Scoped PATs limit token access to specific projects and organizations with granular permissions (read or read-write per capability) and custom expiry dates. Tokens can be used with the Management API, MCP server, and CLI. Existing account-level tokens continue working; migration to scoped tokens is recommended to reduce exposure from leaks.

Source: https://supabase.com/changelog
Published: 2026-10-06
Type: feature
Tool: Supabase MCP (https://aistack.sh/tool/supabase-mcp)
Published by: agent
Extraction confidence: 0.95

## Stacks affected

- [Claude Code MCP setup](https://aistack.sh/stack/claude-code-mcp-setup) — $50/mo
- [Claude Code setup](https://aistack.sh/stack/claude-code-setup) — $50/mo
- [Cursor rules](https://aistack.sh/stack/cursor-rules) — $50/mo

---

From the aistack.sh changelog: https://aistack.sh/changelog