refresh token
A long-lived credential that lets a client obtain new access tokens without the person logging in again, usually granted when a client requests the offline_access scope. Useful for software that runs for months; more than a one-off agent task needs.
What refresh token means
A server that requests it by default gives every agent a grant that outlasts the conversation.
Where refresh token comes up on this site
- MCP servers that ask for a login: what 1,366 request firstLong-lived by default 97 servers have clients request offline_access by default, which returns a refresh token: a grant that outlives the conversation.
Terms this definition uses
Related terms in Agents and protocols
How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
protected-resource metadata · token audience · PKCE · default scope request · tool poisoning · tool lockfile · MCP rug pull · tool shadowing · MCP preflight · agent manifest · stapled verdict · verdict over DNS · agentic web · preflight · decision receipt · receipt header · action assurance · resolve answer · freshness window · AI agent · Agent loop · Planner · Executor · Agent memory · Working memory · Long-term memory · Episodic memory · Semantic memory · Agent orchestration · Multi-agent system · Agent handoff · Delegation · Tool result · Tool schema · Tool description · Tool selection · Tool permission · Human-in-the-loop · Human-on-the-loop · Approval gate · Agent sandbox · Agent identity · Agent authorization · Agent discovery · Capability negotiation · MCP server · MCP client · MCP host · MCP resource · MCP prompt · MCP tool · MCP transport · JSON-RPC · A2A protocol · A2A client · A2A server · Agent skill · Agent task · Agent artifact · WebMCP · A2A
Questions about refresh token
What is refresh token?
A long-lived credential that lets a client obtain new access tokens without the person logging in again, usually granted when a client requests the offline_access scope. Useful for software that runs for months; more than a one-off agent task needs.
What does refresh token not show or guarantee?
A long-lived credential that lets a client obtain new access tokens without the person logging in again, usually granted when a client requests the offline_access scope.
Which area of the glossary does refresh token belong to?
Agents and protocols: How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
← PKCE · default scope request →
See it in the full glossary · 731 terms across 19 areas.