API tokens

For agents and scripts that can't sign in with your account. Most agents don't need one: sign in from the agent instead.