Web agent tokens are used for identity, authentication and authorization.

View the Token Class API documentation.

A token is addressed to a single server (aud) from a single client (sub), and requests capabilities on one or more HTML apps (scope).