OAuth 2.0
Updated
OAuth 2.0 is the authorisation framework that lets an application obtain a limited access token to an API instead of using a password. It is defined in RFC 6749.
In practice
Tokens can be limited in scope and duration: give an automation or an AI agent a token that can read usage but not cancel SIMs, and revoke it without changing anyone’s password.