Integrations content from Swytchcode.
Most of what you want an agent to do on GitHub needs no push access at all. Working that out first is the difference between a useful teammate and a token that can rewrite your main branch.
There are at least eight different ways to create a refund in Stripe's API, and an agent given 'access to Stripe' will confidently pick one of them. Here is how to make sure it picks the one you meant, once.
The hard part is not the API. It is that the token you paste decides whose name the message appears under, and that one token per workspace does not survive your second customer.