can I limit PAT (permanent access token) issued for my serverless function to only a single node?

not yet - if you want control like that, you need to use a user token and control that with the permission system

oh thanks, nothing fancy really, just a webhook that I wanted to limit down to a node it’s updating. Tnx anyway!