Token icons

The 8 token icons, described

API keyapi-key

An API key — the secret string that proves a request comes from you.

Chipchip

A chip — a small labelled pill you can pick, a filter or a token.

CSRFcsrf

CSRF — a request the browser sends with your session that you never asked for.

MCP OAuthmcp-oauth

MCP OAuth — the server proves who may call it with a token from an authorisation flow.

OAuthoauth

OAuth — somebody else's key lent to you, a delegated grant of access.

Scoped tokenscoped-token

A token pill held between brackets — an access token limited to one scope.

Secretsecret

A secret — a credential, token or key that only the system should ever know.

Token expirytoken-expiry

A key with a clock in its head — a credential that expires after a while.

In code, each is one import — import { ApiKey } from "@iconmind/react/icons/api-key" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Tags these icons also carry