Enumerating Work Items as part of a release pipeline

Hello,

I'm trying to develop a script that will execute as part of a release pipeline. The script should enumerate work items returned by a stored query and perform release activites per each work item using some custom fields included in the work item itself.

Looking at the API documentation it seems that I will need to generate a personal access token to give my script access to the Azure DevOps environment to do this activity but my question is - why? If I'm running the python as a release task, technically I've already got "access" by the very nature of the release pipeline itself running as an agent task? Do I really need to generate another token or can I just use the context of the agent? And if so, how?

The issue names no repository files or tests; start with the API documentation for personal access tokens and the release-task agent context described in the question. Document whether a release pipeline can enumerate stored-query work items and access their custom fields without a separate token, and explain the supported authentication path.