Can dishonest owners of VK applications use my access_token?

Question

In contact with

When using VKontakte applications, we give them an access token to their account at some level (management of notifications / wall / messages). Can an unscrupulous application owner have the opportunity to use the token for personal gain?

Answer 1

A token is a technical ability to make some calls to the VKontakte API on behalf of the user who installed the application.
How to dispose of such a technical opportunity is entirely on the conscience of the author of the application.
What you definitely don’t need to do is to copy, at the request of the application authors, the address bar from your browser when they write “Do not copy! ..” below. In this case, you give really critical permissions to an unknown application that 100% violates the VK rules .