When an application or user requests access to an email marketing service, the service issues an access token. This token must be included in subsequent API requests to prove the authenticity of the requester. The token has a limited lifespan and may expire, requiring the requester to obtain a new one.