API Token - Can a Token be limited to a single sheet or workspace

I am looking to give an external developer the Smartsheet API so that I can get data to a specific sheet.

I generated a new API ACCESS TOKEN and am concerned that this developer who I do not know (I am trying him out) will have access to all my sheets. Please tell me this is not true.