When generating authentication tokens to connect an agent to the MCP server, is it best to use a personal access token, or generate an API token? Either way, what are the scopes needed on the token?
never-displayed