Settings and permissions
A plugin's page in Settings
Each plugin that is on has a page in Settings, in the Plugins group, under its own name. Its own settings are tabs there (the Software Development plugin's Projects, for example), and About says what it adds: its version, the permissions it adds for API tokens and AI assistants, the events it sends to webhooks, and which plugins it needs or is needed by.
Everything a plugin does in its pages can also be done through the API, and most of it by AI assistants. What plugins do that matters to an auditor (deleting, settings and status changes) is in the audit log, with the plugin's icon.
Permissions a plugin adds
A plugin can add permissions (scopes) for API tokens and AI assistants, like dev:read, dev:write and
dev:admin, or incidents:read and incidents:write.
- They are offered under Settings → API tokens and on the approval page for AI assistants only while the plugin is on.
- A token that has such a permission keeps it while the plugin is off, but can't reach anything with it.