A short-lived, signed token, specified in an IETF OAuth working group draft, that carries user identity, workload identity and authorisation context through a call chain within one trusted domain, so downstream services can decide on protected context 1. Still a draft (revision 11, 30 Jul 2026) as of 2026-09-24.
- Developed in
- ch. 23, Accountability across hops
- Chapters
- ch. 23, AI Agents
- Contrast with
- Delegation (OAuth token exchange)
- Source
- 1 numbered reference, listed below
Where it is used
One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.
- 23 · AI Agents Multi-agent systems and delegation chains 1 mention
Related terms
Sources
- [1] draft-ietf-oauth-transaction-tokens-11, Transaction Tokens (Internet-Draft, OAuth working group, revision 11 of 30 Jul 2026, WG state "Waiting for Write-Up"; short-lived signed tokens that propagate user identity, workload identity and authorisation context through a call chain within a trusted domain). IETF. 2026-07-30. https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/ (verified: primary)
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .