Create at: GitHub → Settings → Developer settings →
Fine-grained tokens
Permissions: Contents (read/write), Pull requests (read/write)
Most projects use CSS-first tokens (custom properties in globals.css or imported tokens.css). Pick dtcg only if your source of truth is a tokens.dtcg.json file.
Overrides CSS auto-discovery when set. Leave blank unless your tokens live outside globals.css and aren't imported from it.
Path to the DTCG token file (used in dtcg mode or as fallback in css mode when no CSS file is found). Leave blank for the default design-tokens/tokens.dtcg.json.
When enabled, the plugin also commits tokens.dtcg.json as a generated artifact alongside the CSS file.
Disabled by default. When enabled, new token keys can be added to code on push.
Create at: Fine-grained tokens
Permissions: Contents (read/write), Pull requests (read/write)
Pin the scanner to one localhost port. Leave blank to auto-discover across 3000 / 4000 / 5173. Useful when you're running multiple local projects on different ports.
Used in PR descriptions. Defaults to owner/repo if empty.
Unlocks GitHub PR and two-way sync. Leave blank to keep existing key.