Used locally to sign, never sent as-is and never stored. Issued with your tenant by CAKE Support.
The docs use ATV <ACCESS_ID>:<SIGNATURE> and a hex body hash. Some tenants hash the body as base64 instead — confirm with the CAKE backend team. The HMAC Signing tool explains what the prefix and hash-encoding toggles change.