SERVER_URL
ACCOUNT_HANDLE
TOKEN_SCOPE
oauth: read-write read-only global
TOKEN_READ_WRITE
TOKEN_READ_ONLY
TOKEN_GLOBAL
SPEC_VERSION
reveal/hide tokens