Is
Right now an API Key has access to everything the user has.
Want
Make it possible to scope the API Key to specific Teams.
Why
When using API Keys to create stuff via MCP or Github Actions (for example for auto previews for dev branches), it might feel dangerous that this same secret could also delete/modify prod servers or other customers you might have access to. With scoped API keys I can have a seperate/isolated Team for such use cases.
