Jos Ahrens (486d8a89) at 15 Oct 09:27

When a token expires, it's effect is usually noticeable within hours - so anything above a day / 7 days would work for that scenario.

For actual usefulness, 30 or 90 days is probably a good choice. Maybe "90 days or up to 10 records" to avoid the UI from overflowing with noise, though I reckon the average user has one or two PATs at most. (in our case, it was a bot user with over 20)