diff --git a/.github/workflows/sdk_generation_mistralai_azure_sdk.yaml b/.github/workflows/sdk_generation_mistralai_azure_sdk.yaml
index f56e1d89..d5b59b96 100644
--- a/.github/workflows/sdk_generation_mistralai_azure_sdk.yaml
+++ b/.github/workflows/sdk_generation_mistralai_azure_sdk.yaml
@@ -45,7 +45,7 @@ jobs:
       speakeasy_version: ${{ needs.resolve-speakeasy-version.outputs.version }}
       target: mistralai-azure-sdk
     secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      github_access_token: ${{ secrets.CLIENT_PIPELINE }}
       pypi_token: ${{ secrets.PYPI_TOKEN }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
 
@@ -56,7 +56,7 @@ jobs:
       - name: Find PR branch
         id: find-pr
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.CLIENT_PIPELINE }}
         run: |
           PR_BRANCH=$(gh pr list --repo ${{ github.repository }} --author "app/github-actions" \
             --json headRefName,updatedAt --jq 'sort_by(.updatedAt) | reverse | .[0].headRefName // empty')
@@ -67,6 +67,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ steps.find-pr.outputs.branch }}
+          token: ${{ secrets.CLIENT_PIPELINE }}
 
       - name: Install uv
         if: steps.find-pr.outputs.branch != ''
diff --git a/.github/workflows/sdk_generation_mistralai_gcp_sdk.yaml b/.github/workflows/sdk_generation_mistralai_gcp_sdk.yaml
index 2bf4e3dd..f2e33f06 100644
--- a/.github/workflows/sdk_generation_mistralai_gcp_sdk.yaml
+++ b/.github/workflows/sdk_generation_mistralai_gcp_sdk.yaml
@@ -45,7 +45,7 @@ jobs:
       speakeasy_version: ${{ needs.resolve-speakeasy-version.outputs.version }}
       target: mistralai-gcp-sdk
     secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      github_access_token: ${{ secrets.CLIENT_PIPELINE }}
       pypi_token: ${{ secrets.PYPI_TOKEN }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
 
@@ -56,7 +56,7 @@ jobs:
       - name: Find PR branch
         id: find-pr
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.CLIENT_PIPELINE }}
         run: |
           PR_BRANCH=$(gh pr list --repo ${{ github.repository }} --author "app/github-actions" \
             --json headRefName,updatedAt --jq 'sort_by(.updatedAt) | reverse | .[0].headRefName // empty')
@@ -67,6 +67,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ steps.find-pr.outputs.branch }}
+          token: ${{ secrets.CLIENT_PIPELINE }}
 
       - name: Install uv
         if: steps.find-pr.outputs.branch != ''
diff --git a/.github/workflows/sdk_generation_mistralai_sdk.yaml b/.github/workflows/sdk_generation_mistralai_sdk.yaml
index 3f7f5f6c..d9106b95 100644
--- a/.github/workflows/sdk_generation_mistralai_sdk.yaml
+++ b/.github/workflows/sdk_generation_mistralai_sdk.yaml
@@ -45,7 +45,7 @@ jobs:
       speakeasy_version: ${{ needs.resolve-speakeasy-version.outputs.version }}
       target: mistralai-sdk
     secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      github_access_token: ${{ secrets.CLIENT_PIPELINE }}
       pypi_token: ${{ secrets.PYPI_TOKEN }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
 
@@ -56,7 +56,7 @@ jobs:
       - name: Find PR branch
         id: find-pr
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.CLIENT_PIPELINE }}
         run: |
           PR_BRANCH=$(gh pr list --repo ${{ github.repository }} --author "app/github-actions" \
             --json headRefName,updatedAt --jq 'sort_by(.updatedAt) | reverse | .[0].headRefName // empty')
@@ -67,6 +67,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ steps.find-pr.outputs.branch }}
+          token: ${{ secrets.CLIENT_PIPELINE }}
 
       - name: Install uv
         if: steps.find-pr.outputs.branch != ''
diff --git a/.github/workflows/sdk_publish_mistralai_sdk.yaml b/.github/workflows/sdk_publish_mistralai_sdk.yaml
index c3fdd9e0..3fa424df 100644
--- a/.github/workflows/sdk_publish_mistralai_sdk.yaml
+++ b/.github/workflows/sdk_publish_mistralai_sdk.yaml
@@ -25,6 +25,6 @@ jobs:
       (github.event_name == 'workflow_dispatch' && github.event.inputs.confirm_publish == 'publish')
     uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@7951d9dce457425b900b2dd317253499d98c2587 # v15
     secrets:
-      github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      github_access_token: ${{ secrets.CLIENT_PIPELINE }}
       pypi_token: ${{ secrets.PYPI_TOKEN }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}
diff --git a/.github/workflows/update_speakeasy.yaml b/.github/workflows/update_speakeasy.yaml
index 78b5317b..f0179686 100644
--- a/.github/workflows/update_speakeasy.yaml
+++ b/.github/workflows/update_speakeasy.yaml
@@ -27,6 +27,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        with:
+          token: ${{ secrets.CLIENT_PIPELINE }}
 
       - name: Set up Python
         uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
@@ -102,7 +104,7 @@ jobs:
             --label speakeasy-update \
             --assignee ${{ github.actor }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CLIENT_PIPELINE }}
 
       - name: Comment on workflow run
         if: steps.check-changes.outputs.has_changes == 'false'