Using project API tokens to access the cc-tray API

Hey, I’m trying to use Nevergreen to monitor our CircleCI pipelines through the CCTray API CircleCI is implementing (thank you for that!). So far I’ve learned that I can only use my “Personal API Token” for fetching the required information from the endpoint. That has obvious security implications, as a dashboard shouldn’t be able to use the CircleCI on my behalf, it only needs to read data from a single endpoint. Unfortunately, you also cannot select scopes or permissions for personal API tokens, it’s all-or-nothing.

I also tried using a project specific API token, but none of the scopes yielded a usable result.

So my question is this: Is it possible to use the CCTray API with anything but the personal API token? If so, how? If not, would it be too much to ask to add it, maybe, to the “Status” scope of the per-project API token permission set(s)?

Thanks!

I don’t think this is possible today.

The best thing to do would be to add this as a feature request here: https://ideas.circleci.com/