Token passthrough
- Token passthrough is forwarding a client's access token unchanged to a downstream API.
In short: Token passthrough is forwarding a client's access token unchanged to a downstream API. The MCP security best practices forbid it. This entry uses the term the way our gateway datasheets and spec explainers do. Related terms and pages are linked below, so you can follow the idea through the site.
Related terms
By The Datasheet desk · Reviewed 2026-11-03