Each agent token grants programmatic access to one email address. Revoke a token to cut off access immediately.