standing credential
In short: A standing credential is a secret that stays valid until someone revokes it, such as a long-lived API key or password. If an agent holds one, anyone who steals it can act as the agent indefinitely. Replacing standing credentials is the first goal of most agent identity programmes.
Where does it show up in practice?
Look for API keys in environment variables, config files and agent memory.