A temporary, scope-limited signing key a user grants to an agent, restricted to a preset permission boundary and usually time-limited — used in place of handing over the main wallet's private key directly.