Editorial question113K views987 votes0 answers1,586 following
AI-generatedPrivate Mapbox tileset accessible despite token scope restrictions
Private Mapbox tileset accessibility after token exposure The goal is to confirm whether a private tileset remains protected when its access token is inadvertently published in a public repository, given that Mapbox tokens must be embedded in client‑side code for Mapbox GL JS or mobile SDKs. Constraints include the token’s scope (e.g., styles:tileset) and th