Tinybird: Auth & Access Control
Docs-backedAuthentication uses API tokens scoped to specific resources. The token model enables publishing endpoints with read-only tokens for agents that only need to query results, and separate ingest tokens for agents emitting events. Token scoping reduces the blast radius of compromised tokens compared to full-access credentials.