mag
Log inRegister

Security and PAT Permissions

Manage authentication, access scopes, and SSH keys.

Personal Access Tokens (PAT)

Authentication for non-web interfaces (like the CLI or Git operations over HTTP) uses Personal Access Tokens. You can create tokens with limited durations and custom scopes.

Fine-Grained Scopes

Limit token capabilities by checking specific scopes: 'repo:read', 'repo:write', 'mcp:run', or 'admin'. Always apply the principle of least privilege to keep your assets secure.

SSH Key Management

For standard git push/pull operations, register your SSH public keys in your settings. Mag supports modern cryptographic keys like Ed25519 for secure key exchanges.