token exchange
In short: Token exchange is an OAuth pattern where one token is traded for another with a different audience, scope or subject. Agents use it to obtain narrower access for a specific tool. They can also obtain a token on behalf of a person.
Where does it show up in practice?
Gateways often perform token exchange so the agent never holds the downstream credential.