An unfortunate bug with GitHub is that when creating a personal access token you can specify granular permissions for just about anything except the ability to create and manage GitHub Projects.

The only way to create a Personal Access Token for GitHub projects is to move the repo into its own organisation, and then you have the ability to specify these permissions.

I find this a truly bizarre omission to the point that I assume its a bug: I can create a PAT for issues but not projects?

Hopefully this gets resolved, although I have been asking for this for all of 2026.