Cross Domain · security identity
OAuth 2.0 Token Exchange (RFC 8693)
Token Exchange defines how one security token is traded for another, with explicitly modelled delegation and impersonation. It carries actor_token and may_act semantics so a token can record that party A is acting on behalf of party B — the machinery an agentic system needs to answer who authorized an action.
Also known as OAuth 2.0 Token Exchange, RFC 8693.
Providers that carry OAuth 2.0 Token Exchange 0
No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements OAuth 2.0 Token Exchange and says so in its APIs.json profile appears here on the next build. Add or correct a listing.
Read from the API Evangelist standards directory. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.