Sync open source content 🐝 (from 496b19b8e6be6961abff01f067690c1b01d47f5f)

Author: beezythebot

docs/publish-sdk.mdx

@@ -19,14 +19,14 @@ import { Table, Callout, Screenshot } from "@/mdx/components";
 
 <Table 
   data={[
-    { language: "TypeScript", manager: "npm", prerequisites: "[Access tokens](https://docs.npmjs.com/creating-and-viewing-access-tokens)", notes: "Create an access token of type `Automation`. Supports both SDKs and MCP servers." },
+    { language: "TypeScript", manager: "npm", prerequisites: "[Granular access tokens](https://docs.npmjs.com/creating-and-viewing-access-tokens)", notes: "Use granular access tokens with read and write permissions. Classic tokens are deprecated. Supports both SDKs and MCP servers." },
     { language: "Python", manager: "PyPI", prerequisites: "[API tokens](https://pypi.org/help/#apitoken)", notes: "" },
     { language: "Go", manager: "GitHub", prerequisites: "[Repo visibility](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility)", notes: "For private repos, add the [Speakeasy app](https://github.com/marketplace/speakeasy-api)." },
     { language: "Java", manager: "Maven", prerequisites: "[Get started with Maven Central](https://central.sonatype.org/publish-ea/publish-ea-guide/) and [verify domain ownership](https://central.sonatype.org/faq/verify-ownership/)", notes: "" },
     { language: "PHP", manager: "Packagist", prerequisites: "[See publishing packages](https://packagist.org/)", notes: "Monorepo setups not permitted. Package must be initially created manually in Packagist." },
     { language: "C#", manager: "NuGet", prerequisites: "[API key](https://learn.microsoft.com/en-us/nuget/nuget-org/publish-a-package#create-an-api-key)", notes: "" },
     { language: "Terraform", manager: "Terraform", prerequisites: "[GPG Key](https://developer.hashicorp.com/terraform/registry/providers/publishing#preparing-and-adding-a-signing-key)", notes: "" },
-    { language: "MCP Server (TypeScript)", manager: "npm", prerequisites: "[Access tokens](https://docs.npmjs.com/creating-and-viewing-access-tokens)", notes: "MCP servers are published as npm packages. Create an access token of type `Automation`." }
+    { language: "MCP Server (TypeScript)", manager: "npm", prerequisites: "[Granular access tokens](https://docs.npmjs.com/creating-and-viewing-access-tokens)", notes: "MCP servers are published as npm packages. Use granular access tokens with read and write permissions." }
   ]}
   columns={[
     { key: "language", header: "Language/Type" },
@@ -227,6 +227,27 @@ This configuration generates a `package.json` that looks like:
 For more details on `additionalPackageJSON` configuration options, see the [TypeScript configuration reference](/docs/speakeasy-reference/generation/ts-config#additional-json-package).
 </Callout>
 
+#### TypeScript: npm granular access tokens
+
+The npm registry requires granular access tokens for publishing packages. Classic tokens are deprecated; use granular tokens instead.
+
+**Generating a granular access token:**
+
+1. Log in to your [npm account](https://www.npmjs.com/)
+2. Navigate to **Access Tokens** in your account settings
+3. Click **Generate New Token** and select **Granular Access Token**
+4. Configure the token with the following settings:
+   - **Token name**: Choose a descriptive name (e.g., `speakeasy-sdk-publishing`)
+   - **Expiration**: Default is 7 days, but can be extended up to 1 year for automation workflows
+   - **Packages and scopes**: Select **Read and write** permission for the packages you want to publish
+   - For organization packages, ensure you have the appropriate organization permissions
+
+5. Copy the generated token and store it securely as the `NPM_TOKEN` secret in your GitHub repository
+
+<Callout title="Important">
+Granular tokens expire after the configured period (default 7 days). For CI/CD workflows, set a longer expiration period (up to 1 year) and establish a process to rotate tokens before they expire to avoid publishing failures.
+</Callout>
+
 ## Migrating from a monorepo to a dedicated repository
 
 When moving a Speakeasy-generated SDK from within a monorepo to its own dedicated repository, follow these steps to ensure a smooth transition.