Unverified50% confidenceFactExact time
The restricted INFO_READ Reader token follows a least-privilege design: it has read capability only and cannot install, execute, or authorize.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/19/2026
First Seen
Valid until: 1/17/2027
Sources
Related Entities
Related Claims
UnverifiedThe principle of least privilege includes: limiting token scope (read-only or restricted to a single repository), setting expiration times, preferring OAuth and app-specific passwords over master passwords, and keeping 2FA and payments in human hands.66% similarUnverifiedThe article recommends not allowing agents to use user session tokens directly, and instead assigning them independent credentials with limited scope.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1068547API
curl https://kongchang.com/api/v1/knowledge/claims/1068547MCP
get_claim(id=1068547)