PlanetScale service tokens now show where they were last used
Service tokens in PlanetScale's dashboard, API and CLI now show the IP, location and network operator they were last used from, making a leaked credential easier to spot.
PlanetScale said on 26 October that service tokens now record the IP address they were last used from, along with the location and the network operator, such as an ISP or cloud provider. The information shows up in the dashboard, the API and the CLI.
Service tokens are the machine credentials PlanetScale databases use for things like deploy pipelines and application servers, rather than something a person types in. Until this change, a token gave no visibility into where it was actually being used from, short of digging through database connection logs.
Why it matters: a leaked service token is indistinguishable from a legitimate one until it does something unexpected. Surfacing the last IP, location and network operator gives teams a fast way to notice a token being used somewhere it has no reason to be, and revoke it, without having to go log-spelunking first.