Sometimes the only thing I need from an API token is to read a few things.

Especially if the token is going into a shared environment of some kind - Having a read-only / no-op token is important.