agent Token
Pre-shared token presented to the Proxy on every gRPC call. Must match the Proxy's proxy.agentToken; the Proxy rejects calls with a missing or mismatched token (UNAUTHENTICATED). Empty (default) sends no token. Resolved from CLI → AGENT_TOKEN env var → agent.agentToken config. Never logged.