API tokens now support custom permissions, allowing you to control exactly what each token can do, such as managing packages, team members, or other tokens, with separate read and write access levels. Existing tokens will continue to work as before with preset permissions.