TokenTriage

TokenTriage is a web app (with optional lightweight agent) that discovers, inventories, and continuously monitors identity tokens across your environment—OAuth apps, API keys, service principals, long-lived refresh tokens, CI/CD secrets, and third-party SaaS integrations. It maps who/what issued each token, where it’s used, its effective permissions, and whether it’s stale, over-privileged, or violating policy. The MVP focuses on high-signal risk reduction: detect unused tokens, flag dangerous scopes, identify shadow OAuth apps, and provide one-click remediation playbooks (rotate, revoke, reduce scopes, enforce expiration). It integrates first with Microsoft Entra ID and Google Workspace, then expands to GitHub, Slack, and major CI tools. This is not a generic IAM console; it’s a pragmatic “token hygiene” layer that security teams can deploy quickly to reduce breach blast radius and audit pain.