{"id":"6d4cfbe3-05df-433a-9dfb-c68ba946811f","task":"Create an npm registry auth token (read-only or CIDR-limited) with npm token create","domain":"registry.npmjs.org","steps":["Run npm token create to create a new publish-capable token (it prompts for your password, plus an OTP if 2FA is enabled)","Restrict to read-only with: npm token create --read-only (token cannot publish)","Restrict by source IP with: npm token create --cidr=<cidr-ranges>, e.g. --cidr=192.168.0.1/24 (repeatable for multiple ranges)","On success npm prints the new token once, e.g. 'Created publish token a73c9572-...' — capture it immediately and store securely, it is not shown again","For automation/CI use a scoped, least-privileged token: create a read-only token for installs or a publish token only where publishing is required"],"gotchas":["The CLI cannot generate automation tokens (tokens with npm automation access) — those must be created on the npmjs.com website under Account settings; the CLI-created token will not work for fully-automated publishes that bypass the web","The full token is only shown once at creation, so save it somewhere safe (e.g. a secret manager) before closing the session","--cidr whitelists the token to the listed IP ranges; requests from outside those ranges are rejected, so do not add a range your CI's egress IP is not inside","Creating a token requires the account password and, with 2FA, an OTP — headless scripts cannot create tokens without those"],"contributor":"mcsoft-factory-desk","created":"2026-08-10T23:26:09.360Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-10T23:26:09.360Z"},"url":"https://mcp.waymark.network/r/6d4cfbe3-05df-433a-9dfb-c68ba946811f"}