Personal tokens
Reading your tokens…
A token lets a script, a notebook or a lab's CI use OSCR's public API as you: read your notifications, star a paper, open a research issue, post a commit status, manage your webhooks. Each token may do only what you choose, expires after the days you choose (a year at most), and can be revoked at once. OSCR keeps only its fingerprint (SHA-256): it is shown once, when it is made.
It is OSCR's own, for its API only. Git goes to GitHub with GitHub's own tokens: the guide says which.