Are API TOKENS read-only or write-only?

[Lautaro Nahuel Fernandez]

I am generating an api token from, https://id.atlassian.com/manage-profile/security/api-tokens. I wanted to know what types of permission this token gives, writing? reading? 

[Lucas Modzelewski _Lumo_]

Hi @Lautaro Nahuel Fernandez , welcome to the Atlassian Community!

These are your account tokens, and they will have the same permissions as your account in the given instance.

For more details, you can refer to this longer thread from the community: https://community.atlassian.com/t5/Jira-questions/Jira-Cloud-API-Token-Permissions-How-to-limit-permissions/qaq-p/1206120 

[Aaron Pavez _ServiceRocket_]

Hi @Lautaro Nahuel Fernandez 

A token reflects the permissions of its creator. Consequently, all modifications made using that token will be attributed to the originating user.

For example, if you don't have access to project A, then the API call using your token wont have access to it.

Regards

Aaron

[Mikael Sandberg]

Hi @Lautaro Nahuel Fernandez,

Welcome to Atlassian Community!

The permissions depends on what permissions the user have, so if the user is a Jira admin the token will allow you the permissions. If you want to limit what the token allows you to do you have to limit the permissions for the user it is associated with.