No. BinaryLane does not currently support scoped API tokens. Treat a BinaryLane API token as full account access: a token that can list your servers can also do anything else the API allows on your account.
Using a token only for read-only requests does not restrict what that token can do.
Protect your API token
- Create a separate token for each purpose, and revoke it when it is no longer needed. Separate tokens do not have reduced permissions.
- For scripts, pass the token through an environment variable rather than embedding it in the script, an Ansible playbook, an inventory or an Ansible variable file.
- Do not commit tokens to version control or include them in files your scripts generate.
- If a token may have been exposed, replace it in mPanel and update any scripts or tools that use it.
For token setup, see Getting Started with BinaryLane API.