In plain language
It is a temporary pass the app shows with each request instead of the user’s password.
Example
After a user connects Google Sheets, the automation sends an access token with each request to read the sheet.
Related terms
OAuth · Refresh Token · OAuth Scope · Authentication
Common misconception
An access token is not permanent; it often expires within an hour, which is why connections need refresh tokens.
Implementation guidance
Send tokens only over HTTPS, never log or share them, request the narrowest scopes, and handle expiry by refreshing instead of reconnecting.