Apply suggestions from code review

priley86 · lrzhou25 · pmalouin · web-flow · commit a0a654c2c646 · 2025-10-13T13:42:32.000-04:00
Co-authored-by: lrzhou25 &lt;141781699+lrzhou25@users.noreply.github.com&gt;
Co-authored-by: Patrick Malouin &lt;p.malouin@gmail.com&gt;
diff --git a/auth4genai/intro/call-others-apis-on-users-behalf.mdx b/auth4genai/intro/call-others-apis-on-users-behalf.mdx
@@ -1,6 +1,6 @@
 ---
 title: Call Other's APIs on User's Behalf
-description: "[Token Vault](/intro/token-vault) lets your AI agent call external APIs on the user's behalf. We provide SDKs for Python, JavaScript, and popular AI frameworks like LangChain, LlamaIndex, Genkit, and Vercel AI, making it easy and straightforward to get access tokens for your third-party connections."
+description: "[Token Vault](/intro/token-vault) lets your AI agent call external APIs on the user's behalf. We provide SDKs for Python, JavaScript, and popular AI frameworks like LangChain, LlamaIndex, Genkit, and Vercel AI, making it easy and straightforward to get access tokens for external applications."
 ---
 
 ## Web applications with backend for frontend
diff --git a/auth4genai/intro/token-vault.mdx b/auth4genai/intro/token-vault.mdx
@@ -48,8 +48,8 @@ The process of using Token Vault involves the following key steps:
 
 1. **User authentication and consent:** The [user links](/intro/account-linking) and authenticates with an external Identity Provider (e.g., Google) and grants your application permission to access their data by approving the requested OAuth scopes.
 2. **Secure token storage:** Auth0 receives access and refresh tokens from the external provider and stores them securely within Token Vault.
-3. **Token exchange:** Your application can then exchange a valid Auth0 refresh token for a third-party access token from Token Vault. This allows your application to obtain the necessary credentials to call the third-party API without the user having to re-authenticate. It also means your application does not need to store or manage any credentials.
-4. **API call:** With the third-party access token, your AI agent can make authorized calls to the third-party API on the user's behalf.
+3. **Token exchange:** Your application can then exchange a valid Auth0 refresh token for an external provider's access token from Token Vault. This allows your application to obtain the necessary credentials to call external APIs without the user having to re-authenticate. It also means your application does not need to store or manage any credentials.
+4. **API call:** With the external provider's access token, your AI agent can make authorized calls to the external API on the user's behalf.
 
 ## Supported integrations
 
diff --git a/auth4genai/snippets/get-started/langchain-fastapi-py/call-others-api.mdx b/auth4genai/snippets/get-started/langchain-fastapi-py/call-others-api.mdx
@@ -256,7 +256,7 @@ async def list_upcoming_events_fn():
     google_access_token = get_access_token_from_token_vault()
     if not google_access_token:
         raise ValueError(
-            "Authorization required to access the Token Vault connection API"
+            "Authorization required to access the Google Calendar API"
         )
 
     calendar_service = build(
diff --git a/auth4genai/snippets/how-tos/github/cloudflare-agents.mdx b/auth4genai/snippets/how-tos/github/cloudflare-agents.mdx
@@ -180,7 +180,7 @@ The name of the user is ${claims?.name ?? "unknown"}.
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Github and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/github/genkit.mdx b/auth4genai/snippets/how-tos/github/genkit.mdx
@@ -174,7 +174,7 @@ export async function GET(
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/github/langgraph-python.mdx b/auth4genai/snippets/how-tos/github/langgraph-python.mdx
@@ -167,7 +167,7 @@ You can check different authentication options for Next.js with Auth0 at the [of
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/github/langgraph.mdx b/auth4genai/snippets/how-tos/github/langgraph.mdx
@@ -297,7 +297,7 @@ export { auth as authHandler };
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/github/llamaindex.mdx b/auth4genai/snippets/how-tos/github/llamaindex.mdx
@@ -132,7 +132,7 @@ export async function POST(request: Request) {
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/ai-sdk.mdx b/auth4genai/snippets/how-tos/google-calendar/ai-sdk.mdx
@@ -142,7 +142,7 @@ export async function POST(request: Request) {
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/cloudflare-agents.mdx b/auth4genai/snippets/how-tos/google-calendar/cloudflare-agents.mdx
@@ -193,7 +193,7 @@ The name of the user is ${claims?.name ?? "unknown"}.
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/genkit.mdx b/auth4genai/snippets/how-tos/google-calendar/genkit.mdx
@@ -191,7 +191,7 @@ export async function GET(
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/langgraph-python.mdx b/auth4genai/snippets/how-tos/google-calendar/langgraph-python.mdx
@@ -180,7 +180,7 @@ You can check different authentication options for Next.js with Auth0 at the [of
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/langgraph.mdx b/auth4genai/snippets/how-tos/google-calendar/langgraph.mdx
@@ -310,7 +310,7 @@ export { auth as authHandler };
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/google-calendar/llamaindex.mdx b/auth4genai/snippets/how-tos/google-calendar/llamaindex.mdx
@@ -150,7 +150,7 @@ export async function POST(request: Request) {
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/ai-sdk.mdx b/auth4genai/snippets/how-tos/slack/ai-sdk.mdx
@@ -124,7 +124,7 @@ export async function POST(request: Request) {
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/cloudflare-agents.mdx b/auth4genai/snippets/how-tos/slack/cloudflare-agents.mdx
@@ -177,7 +177,7 @@ The name of the user is ${claims?.name ?? "unknown"}.
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Github and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/genkit.mdx b/auth4genai/snippets/how-tos/slack/genkit.mdx
@@ -174,7 +174,7 @@ export async function GET(
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Google Calendar and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/langgraph-python.mdx b/auth4genai/snippets/how-tos/slack/langgraph-python.mdx
@@ -174,7 +174,7 @@ You can check different authentication options for Next.js with Auth0 at the [of
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/langgraph.mdx b/auth4genai/snippets/how-tos/slack/langgraph.mdx
@@ -297,7 +297,7 @@ export { auth as authHandler };
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with Slack and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/how-tos/slack/llamaindex.mdx b/auth4genai/snippets/how-tos/slack/llamaindex.mdx
@@ -138,7 +138,7 @@ export async function POST(request: Request) {
 
 #### Client Side
 
-On this example we utilize the `TokenVaultConsentPopup` component to show a popup that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
+In this example, we utilize the `TokenVaultConsentPopup` component to show a pop-up that allows the user to authenticate with GitHub and grant access with the requested scopes. You'll first need to install the `@auth0/ai-components` package:
 
 ```bash wrap lines
 npx @auth0/ai-components add TokenVault
diff --git a/auth4genai/snippets/integrations/learn-more.mdx b/auth4genai/snippets/integrations/learn-more.mdx
@@ -4,5 +4,5 @@ If you want to use more than one connection for a user, you can link their accou
 
 ## Learn more
 
-- Auth0's [Token Vault](https://auth0.com/docs/secure/tokens/token-vault) organizes the access and refresh tokens of third-party connections in secure tokensets. Applications can then access the Token Vault to retrieve access tokens to call third-party APIs. To learn more, read [Configure Token Vault](https://auth0.com/docs/secure/tokens/token-vault/configure-token-vault).
+- Auth0's [Token Vault](https://auth0.com/docs/secure/tokens/token-vault) organizes the access and refresh tokens of external providers in secure tokensets. Applications can then access the Token Vault to retrieve access tokens to call external APIs. To learn more, read [Configure Token Vault](https://auth0.com/docs/secure/tokens/token-vault/configure-token-vault).
 - Learn how to get an access token to make a tool call by completing the [Call other's APIs on user's behalf quickstart](/get-started/call-others-apis-on-users-behalf).
diff --git a/main/secure/tokens/token-vault.mdx b/main/secure/tokens/token-vault.mdx
@@ -1,14 +1,14 @@
 ---
-description: Learn how Token Vault securely stores third-party access and refresh
-  tokens.
+description: Learn how Token Vault securely stores the access and refresh
+  tokens of external providers.
 'og:image': https://cdn2.auth0.com/docs/1.14553.0/img/share-image.png
 'og:title': Token Vault
 'og:url': https://auth0.com/docs/
 permalink: token-vault
 sidebarTitle: Overview
 title: Token Vault
-'twitter:description': Learn how Token Vault securely stores third-party access and
-  refresh tokens.
+'twitter:description': Learn how Token Vault securely stores the access and
+  refresh tokens of external providers.
 'twitter:title': Token Vault
 ---
 <Callout icon="file-lines" color="#0EA5E9" iconType="regular">
@@ -19,7 +19,7 @@ Token Vault is currently available in Early Access for public cloud tenants. To
 
 Token Vault enables your applications to securely access third-party APIs on the user's behalf. There is no need to manage <Tooltip tip="Refresh Token: Token used to obtain a renewed Access Token without forcing users to log in again." cta="View Glossary" href="/glossary?term=refresh+tokens">refresh tokens</Tooltip> or build custom integrations per provider—Auth0 handles it all for you. You gain access to a wide range of external providers’ APIs and services, all through a single Auth0 integration.
 
-When a user authenticates with a supported external provider and uses <Tooltip tip="OAuth 2.0: Authorization framework that defines authorization protocols and workflows." cta="View Glossary" href="/glossary?term=OAuth">OAuth</Tooltip> scopes to authorize access, Auth0 stores the access and refresh tokens for that connection in the Token Vault. Token Vault organizes the third-party tokens issued by external providers into tokensets, with one tokenset per authorized connection.
+When a user authenticates with a supported external provider and uses <Tooltip tip="OAuth 2.0: Authorization framework that defines authorization protocols and workflows." cta="View Glossary" href="/glossary?term=OAuth">OAuth</Tooltip> scopes to authorize access, Auth0 stores the access and refresh tokens for that connection in the Token Vault. Token Vault organizes the tokens issued by external providers into tokensets, with one tokenset per authorized connection.
 
 You can then call the external provider's APIs using these stored credentials via Auth0 to get a user’s Google Calendar events, access GitHub repos, create a Microsoft Word document, and more.
 
@@ -38,9 +38,9 @@ For Early Access, Auth0 supports Token Vault for the following social and enterp
 When a user authenticates with a supported external provider and authorizes the third-party connection:
 
 1. Auth0 obtains access tokens using OAuth 2.0 scopes to control access. Users explicitly approve requested permissions.
-2. Auth0 securely stores third-party access and refresh tokens in the Token Vault.
+2. Auth0 securely stores the access and refresh tokens of external providers in the Token Vault.
 3. The application [links user accounts](/docs/manage-users/user-accounts/user-account-linking) with the user's consent. As a result, the user won’t have to create separate accounts for each external provider.
-4. Your application calls Auth0 to exchange a valid Auth0 refresh token with an access token for a third-party connection. Your application can perform this exchange multiple times while Auth0 manages refreshing the third-party access tokens stored in the Token Vault. Using a third-party access token, your application can call third-party APIs on the user’s behalf.
+4. Your application calls Auth0 to exchange a valid Auth0 refresh token for an external provider's access token. Your application can perform this exchange multiple times while Auth0 manages refreshing the access tokens stored in the Token Vault. Using an external provider's access token, your application can call external APIs on the user’s behalf.
 
 Token Vault allows for seamless federated identity and simplifies integration across multiple external providers via a single Auth0 interface.
 
diff --git a/main/secure/tokens/token-vault/call-apis-with-token-vault.mdx b/main/secure/tokens/token-vault/call-apis-with-token-vault.mdx
diff --git a/main/secure/tokens/token-vault/configure-token-vault.mdx b/main/secure/tokens/token-vault/configure-token-vault.mdx

Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ async def list_upcoming_events_fn():`
`256`	`256`	`google_access_token = get_access_token_from_token_vault()`
`257`	`257`	`if not google_access_token:`
`258`	`258`	`raise ValueError(`
`259`		`- "Authorization required to access the Token Vault connection API"`
	`259`	`+ "Authorization required to access the Google Calendar API"`
`260`	`260`	`)`
`261`	`261`
`262`	`262`	`calendar_service = build(`