A Planning Center personal access token acts with its creator's permission level, and PCO offers no admin control over tokens. So this page watches the levels: anything a Manager can see, their token can export in bulk. Token creations themselves only appear in PCO's Security History, which has no API — that half is the Monday browser pass.