diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6776b18..cbbdf29 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,6 +41,11 @@ jobs:
         with:
           app_id: ${{ secrets.HAWKY_APP_ID }}
           private_key: ${{ secrets.HAWKY_APP_PRIVATE_KEY }}
+      - name: Test token permissions
+        run: |
+          curl -v -H "Authorization: token ${{ steps.generate_token.outputs.token }}" \
+            https://api.github.com/repos/stackhawk/stackhawk-mcp
+        shell: bash
       - name: Set up git for pushing
         run: |
           git remote set-url origin https://x-access-token:${{ steps.generate_token.outputs.token }}@github.com/${{ github.repository }}.git