API key
In short: An API key is a static secret string that grants access to an API. Keys rarely expire, are easy to copy and often sit in code or environment variables. An agent holding an API key is a standing credential risk that short-lived access should replace.
Where does it show up in practice?
Silverfort describes removing standing privileges for agents using static API keys.