They’re not really cryptographic keys in that sense usually; I’d say “bearer token” is more accurate.