[figmert]

> It just wants me to sign-up and provide a bunch of permissions without first selling itself to me.

Yes, and including admin access to all your orgs :)

[1f60c]

As the help text explains, you can tap to select or unselect any permissions beyond the basics. (Which are admittedly still quite broad.)

You can also use a PAT but that's already too much friction for me for something like this.

[reactordev]

Justification of malfeasance is not an excuse.

[sceptic123]

But it's okay because

> Your access token is encrypted and stored securely. Only the permissions you grant will be used.