Unverified60% confidenceFactExact time
When an identity provider issues an Access Token, it encodes the user's roles, permissions, and organizational affiliation at the moment of issuance, and the token's content remains fixed for its validity period unless it expires or is actively revoked.
2
Sources
60%
Confidence
Long-term
Relevance
9/22/2026
First Seen
Sources
Related Entities
Related Claims
Unverified将为官方客户端设计的 access token 用于非官方工具可能违反 token 预期使用场景，Cursor 可能通过设备指纹、请求模式分析和异常检测识别后吊销 token 或封禁账号75% similarUnverifiedAfter a user logs in, Cursor stores session credentials (Session Token) locally.74% similarUnverifiedTop-up services require users to submit the session credentials (Session Token or Cookie) of their accounts; a third party holding these credentials can fully impersonate the user and initiate all operations, including subscription payments, modifying account information, and accessing conversation history.73% similarUnverifiedThe agent exchanges the authorization code for an access token at the token endpoint, and after the token expires, it can use a Refresh Token to obtain a new access token without requiring the user to authorize again.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/940930API
curl https://kongchang.com/api/v1/knowledge/claims/940930MCP
get_claim(id=940930)