Yes, but what I am saying is that it’d be nice for the API access tokens issued by the DNS providers to be limited to specific record type and specific label.

For example, the access tokens that you generate for giving tools like that one access to act on your behalf, when using CloudFlare as your DNS provider.

CloudFlare at the moment does not to my knowledge offer such fine grained controls as what I am talking about, on the API access tokens.