Access tokens are tied to the All-Images user account for which they were created. A token provides the same level of access & privileges that its associated All-Images user account would have.
Please be sure to keep your API access tokens secure! Do not share them in emails, chat messages, client-side code or publicly accessible sites.
If you have accidentally shared an API access token publicly, you can revoke it in the API Keys page of your All-Images user account by clicking the "Remove" button beside the token.