A secret token that identifies your app to an outside service and proves you're allowed to use it. Treat it like a password — keep it out of your code.