Fine-grained access tokens and service account tokens can now be granted a new contributor permission. A token with it can create repositories in your account or in the organizations you select, and gets full write access to the repositories it created itself. It can't write to any other repository, even ones you or your other tokens created.
This is useful for CI/CD pipelines, training jobs and agents that publish new checkpoints or datasets: they no longer need write access to every repository in the namespace. It works like the contribute-repos scope already available to OAuth apps.









