Unverified50% confidenceFactExact time
A Personal Access Token (PAT) usually inherits all of the user's own permissions, so once leaked it is equivalent to the personal account being taken over.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGitHub App 相比个人访问令牌（PAT）提供了更精细的权限模型，PAT 泄露会暴露整个账号的仓库访问权限71% similarUnverifiedA PAT is strongly bound to the individual account that created it; if the user leaves or the account is disabled, all automated processes that depend on that Token will be interrupted.68% similarUnverifiedWhen an identity provider issues an Access Token, it encodes the user's roles, permissions, and organizational affiliation at the moment of issuance, and the token's content remains fixed for its validity period unless it expires or is actively revoked.67% similarVerifiedHolding a Session Token allows access to the corresponding service as the user without entering an account name or password.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1049630API
curl https://kongchang.com/api/v1/knowledge/claims/1049630MCP
get_claim(id=1049630)