| Token | API | Issued By | Issued To | To Access |
| Authorization Party Token (AAT) | A API | AS | RP (Client) | A API |
| Protection API Token (PAT) | P API | AS | RS | P API |
| Requesting Party Token (RPT) | A API | AS | RP (Client) | R in RS |