Gitter API Token Scoping and Expiration Limits
Gitter provides API authentication via personal access tokens and an OAuth2 authorization-code flow. While these mechanisms allow programmatic access to rooms and messages, the documentation does not explicitly define a granular permission system for limiting token capabilities. Implementing a least-privilege security model requires knowing if tokens can be
gitter