Harry needs read-only access to your org's metadata. No data is extracted — only structure, automations, and code.
System.debug(UserInfo.getSessionId());DEBUG| followed by your session tokenDEBUG| — that's your access tokenConnecting to Salesforce...