An execution token is a single-use, HMAC-signed proof that a tool execution was authorized.
After confirming a tool is allowed (via permission check or approval), your system calls the token minting endpoint. The token contains a nonce that can only be used once, preventing replay attacks.
Tokens provide cryptographic evidence that: