We run several private Developer Hub apps for internal tools, and we would like their access tokens to follow least privilege. Three changes would help:
1. New apps start with no permissions. Today a new app starts with almost every permission turned on, so whoever creates it has to remember to switch most of them off.
2. Limit which teammate a token can write as. The reply and note endpoints take an admin_id, and as far as we can tell the docs place no restriction on which teammate it names. An option to limit a token to its own teammate would make it clear who did what in a conversation.
3. Invalidate the token when its permissions change. Removing a permission only takes effect after the token is regenerated, so the old token keeps access it should no longer have. Regenerating it automatically, or at least showing a warning, would close that gap.
Intercom's support assistant told us none of these can be configured today.