New recommendation for JavaScript API keys with too many permissions

There’s a new recommendation on the organization level, used as a warning when an active JavaScript API key has too many permissions. We recommend enabling only the messages_write permission on API keys used from JavaScript.