Option A — Fine-grained token (recommended, read-only):
- Go to Fine-grained tokens
- Select repositories: All repositories
- Under Repository permissions, grant:
Issues — Read-onlyPull requests — Read-onlyMetadata — Read-only (auto-selected)
- Click Generate token and paste it above
Note: Fine-grained tokens do not support the Notifications API. The Notifications section will be unavailable.
Option B — Classic token (needed for notifications):
- Go to New classic token
- Select scopes:
notifications, read:user - For private repo access,
repo is also required — note this grants full read/write access, as classic tokens have no read-only repo scope - Click Generate token and paste it above
Classic tokens lack fine-grained permissions. If you only work with public repos, public_repo + notifications + read:user is sufficient and safer.