Security
What is Scoped Token?
Also known as: per-run token
A scoped token grants an agent only the specific, time-limited permissions it needs for one run — limiting the blast radius if something goes wrong.
Instead of giving an AI system broad, standing access to everything, scoped tokens hand out narrow, short-lived permissions per task. If a run is compromised or misbehaves, the damage is bounded by what that token could do.
Velaris issues scoped per-run tokens and stores credentials in an encrypted vault, with row-level isolation between tenants — least-privilege by default.
Related terms
See it in action
Velaris puts scoped token to work inside a real AI Operating System.
Get early access