How to: storyblok unscoped pat sunset rotate timeline

Use this local guide before 2026-12-07. Re-check official vendor documentation for authoritative dates. This site does not call vendor APIs or store tokens.

1. Step 1. Confirm Dec 7 2026 full revoke date (moved from Nov 30 for Cyber Monday) on Storyblok changelog
2. Step 2. Inventory CI pipelines, scripts, and MCP servers still holding unscoped PATs
3. Step 3. Create scoped personal access tokens with sb_pat_ prefix limited to needed spaces/scopes
4. Step 4. Replace secrets in CI, local .env, Postman, Terraform providers, and MCP configs
5. Step 5. Verify callers succeed with scoped tokens before touching old credentials
6. Step 6. Revoke unscoped tokens only after replacements are proven — order matters
7. Step 7. Remember Dec 7 revokes remaining unscoped tokens regardless of original expiry
8. Step 8. Export Markdown timeline pack with changelog + sunset blog URLs into the ticket

Related: FAQ · Use cases · Home tool. Always prefer official vendor documentation for authoritative dates. Export your Markdown pack into the change ticket with the official URLs listed on the home page.

Context for operators: Storyblok revokes all remaining unscoped PATs on Dec 7 2026 (moved from Nov 30); replace with scoped sb_pat_ (CMS token domain). The gap this wedge fills: changelog 有改期与吊销；缺「时间线事件勾选 + scoped 替换顺序」本地楔。不做 Storyblok 控制台 SaaS。 Keep owners assigned on every residue row so nothing silently slips past the deadline. When in doubt, re-open the official source pages rather than trusting a cached screenshot.