JoyConf 2026 is back. Content Confidence. Human Connection. Save your spot!

New

Unscoped Personal Access Tokens sunset moved to December 7, 2026

  • Security
  • Developer Experience
Books and Storyblok Logo

The sunset of unscoped personal access tokens moves from November 30, 2026 to December 7, 2026.


We're moving the sunset of unscoped personal access tokens by one week, from November 30, 2026 to December 7, 2026. November 30 is Cyber Monday, one of the busiest days of the year for many of our customers, and we don't want token revocation to put any integration at risk on that day.

Until December 7, 2026, unscoped tokens continue to work with their current permissions. On December 7, 2026, Storyblok revokes all remaining unscoped tokens, regardless of their expiration dates.

If you haven't migrated yet, create scoped personal access tokens with only the scopes and spaces each integration needs, replace your unscoped tokens wherever they're used (CI pipelines, scripts, MCP server setups), and revoke the old ones.