A secret token that identifies and authenticates an API caller. Simpler than OAuth — appropriate for server-to-server integration, not for end-user delegation. Treat API keys like passwords: rotate them, scope them, never commit them to git.
OTP encodes coordination intelligence so teams of humans and AI agents can run on it.
Found an issue with this definition? Tell us and we'll fix it.