token audience
The resource an access token is valid for. A narrow audience (exactly the endpoint) limits what a leaked or over-shared token can do; an audience of the whole host makes a token issued for one tool usable across the rest of the service.
What token audience does not show
Clients should compare the audience a server declares with the endpoint they connected to and refuse a mismatch.
Terms this definition uses
Related terms in Agents and protocols
How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
protected-resource metadata · PKCE · refresh token · default scope request · tool poisoning · tool lockfile · MCP rug pull · tool shadowing · MCP preflight · agent manifest · stapled verdict · verdict over DNS · agentic web · preflight · decision receipt · receipt header · action assurance · resolve answer · freshness window · AI agent · Agent loop · Planner · Executor · Agent memory · Working memory · Long-term memory · Episodic memory · Semantic memory · Agent orchestration · Multi-agent system · Agent handoff · Delegation · Tool result · Tool schema · Tool description · Tool selection · Tool permission · Human-in-the-loop · Human-on-the-loop · Approval gate · Agent sandbox · Agent identity · Agent authorization · Agent discovery · Capability negotiation · MCP server · MCP client · MCP host · MCP resource · MCP prompt · MCP tool · MCP transport · JSON-RPC · A2A protocol · A2A client · A2A server · Agent skill · Agent task · Agent artifact · WebMCP · A2A
Questions about token audience
What is token audience?
The resource an access token is valid for. A narrow audience (exactly the endpoint) limits what a leaked or over-shared token can do; an audience of the whole host makes a token issued for one tool usable across the rest of the service.
What does token audience not show or guarantee?
Clients should compare the audience a server declares with the endpoint they connected to and refuse a mismatch.
Which area of the glossary does token audience belong to?
Agents and protocols: How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
← protected-resource metadata · PKCE →
See it in the full glossary · 731 terms across 19 areas.