@sparks Thanks for your message.
Yeah, we suggested on a call with GivEnergy to use scoping to limit their API token, and it seems they have gone ahead and implemented this.
These are the scopes Wonder Watt needs:
The name of the token is irrelevant. It's mainly for you to remember what token you are using for which 3rd party service.
Cheers!