Paste a read-scoped service token from the app's admin page (Users → Kind: service → Read token). It won't be shown again.
Edits made on the live site are pulled and filed as a ticket. Nothing is written back.