Solana token authorities explained
Mint authority
The only key that can create new tokens of a mint. Revoked = fixed supply.
Freeze authority
Can freeze individual token accounts so they cannot move the token. Revoked = nobody can ever be frozen.
Update authority (metadata)
Can change the token’s name, symbol, logo and metadata URI — in the Metaplex metadata account or the Token-2022 metadata extension. Revoked = immutable metadata.
Token-2022 extension authorities
Token-2022 mints may also have a transfer-fee config authority (can change the fee), a withdraw-withheld authority (collects the fees) and a metadata pointer authority. Each can be kept, transferred or revoked here.