Safety & permissions

Access token

Also called access tokens.

An access token is a credential that lets software use protected resources within the permissions it was granted, often for a limited time.

Example

You connect a calendar. The app receives an access token that can read events and expires later. The token is not your password, and it is not a count of model usage.

Why it matters

OAuth uses access tokens so an app can act with limited permission without holding the person's password. A bearer token is one way to present an access token. It is not a second name for every credential. An access token is not an AI token and not a design token.

Common confusion

Access token is the credential. See Token if you might mean an AI token or a design token instead.

Sources

Updated September 30, 2026.

Cookie preferences