diff --git a/NEWS.md b/NEWS.md
index 42a6cb87..9d151c5a 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,20 +1,22 @@
 # connectapi (development version)
 
+- When using integrations, prefer to read from `CONNECT_CONTENT_SESSION_TOKEN_FILE` to find the session token. This helps long-running processes ensure that they can maintain fresh credentials.
+
 # connectapi 0.11.1
 
 - `get_usage()` now returns the id column as a character to match other parts of the API (#512).
 
 # connectapi 0.11.0
 
-- `get_usage()` now allows for filtering by content GUID with the `content_guid` 
-  argument. This is only available on Connect server versions 2026.01 and later. 
+- `get_usage()` now allows for filtering by content GUID with the `content_guid`
+  argument. This is only available on Connect server versions 2026.01 and later.
 - The `activate` argument to `set_schedule_*()` functions is deprecated and
   no longer has any effect, due to changes in the Connect API. It will be
   removed in a future release. (#500)
 - Added a single retry to `content_restart()` to more robustly clean up
   temporary environment variables. (#498)
 - Improved performance of `page_cursor()`. (#501)
-  
+
 ## Breaking changes
 
 - Removed `get_image`, `delete_image`, `has_image`, `set_image_path`,
diff --git a/R/get.R b/R/get.R
index 09998502..7cf4affa 100644
--- a/R/get.R
+++ b/R/get.R
@@ -871,8 +871,10 @@ get_oauth_credentials <- function(
 #' @param content_session_token Optional. The content session token. This token
 #' can only be obtained when the content is running on a Connect server. The
 #' token identifies the service account integration previously configured by
-#' the publisher on the Connect server. Defaults to the value from the
-#' environment variable: `CONNECT_CONTENT_SESSION_TOKEN`
+#' the publisher on the Connect server. Defaults to the value found in the file
+#' indicated by the `CONNECT_CONTENT_SESSION_TOKEN_FILE` environment variable
+#' on Connect >= 2026.02.0, or from the value of the environment variable
+#' `CONNECT_CONTENT_SESSION_TOKEN` on earlier versions.
 #' @param requested_token_type Optional. The requested token type. If unset,
 #' will default to `urn:ietf:params:oauth:token-type:access_token`. Otherwise,
 #' this can be set to `urn:ietf:params:aws:token-type:credentials` for AWS
@@ -918,6 +920,14 @@ get_oauth_content_credentials <- function(
     error_if_less_than(connect$version, "2025.07.0")
   }
 
+  # First, try CONNECT_CONTENT_SESSION_TOKEN_FILE
+  if (is.null(content_session_token)) {
+    token_file <- Sys.getenv("CONNECT_CONTENT_SESSION_TOKEN_FILE")
+    if (nzchar(token_file)) {
+      content_session_token <- readLines(token_file, n = 1, warn = FALSE)
+    }
+  }
+  # If that doesn't exist (it was added in 2026.02.0), look for the token itself
   if (is.null(content_session_token)) {
     content_session_token <- Sys.getenv("CONNECT_CONTENT_SESSION_TOKEN")
     if (nchar(content_session_token) == 0) {
@@ -1070,7 +1080,11 @@ get_aws_credentials <- function(connect, user_session_token, audience = NULL) {
 #' }
 #'
 #' @export
-get_aws_content_credentials <- function(connect, content_session_token = NULL, audience = NULL) {
+get_aws_content_credentials <- function(
+  connect,
+  content_session_token = NULL,
+  audience = NULL
+) {
   error_if_less_than(connect$version, "2025.03.0")
 
   if (!is.null(audience)) {
diff --git a/man/get_oauth_content_credentials.Rd b/man/get_oauth_content_credentials.Rd
index 812fe464..6e7a2cd7 100644
--- a/man/get_oauth_content_credentials.Rd
+++ b/man/get_oauth_content_credentials.Rd
@@ -18,8 +18,10 @@ get_oauth_content_credentials(
 \item{content_session_token}{Optional. The content session token. This token
 can only be obtained when the content is running on a Connect server. The
 token identifies the service account integration previously configured by
-the publisher on the Connect server. Defaults to the value from the
-environment variable: \code{CONNECT_CONTENT_SESSION_TOKEN}}
+the publisher on the Connect server. Defaults to the value found in the file
+indicated by the \code{CONNECT_CONTENT_SESSION_TOKEN_FILE} environment variable
+on Connect >= 2026.02.0, or from the value of the environment variable
+\code{CONNECT_CONTENT_SESSION_TOKEN} on earlier versions.}
 
 \item{requested_token_type}{Optional. The requested token type. If unset,
 will default to \code{urn:ietf:params:oauth:token-type:access_token}. Otherwise,
diff --git a/tests/testthat/test-oauth.R b/tests/testthat/test-oauth.R
index 90e86753..554ec9f2 100644
--- a/tests/testthat/test-oauth.R
+++ b/tests/testthat/test-oauth.R
@@ -58,6 +58,29 @@ with_mock_api({
     )
   })
 
+  test_that("if there is a session token file, we prefer that", {
+    token_file <- tempfile()
+    cat("content-session-token", file = token_file)
+    withr::local_options(list(rlib_warning_verbosity = "verbose"))
+    withr::local_envvar(
+      list(CONNECT_CONTENT_SESSION_TOKEN_FILE = token_file)
+    )
+
+    client <- Connect$new(server = "https://connect.example", api_key = "fake")
+    expect_true(validate_R6_class(client, "Connect"))
+    expect_warning(
+      credentials <- get_oauth_content_credentials(client)
+    )
+    expect_equal(
+      credentials,
+      list(
+        access_token = "content-access-token",
+        issued_token_type = "urn:ietf:params:oauth:token-type:access_token",
+        token_type = "Bearer"
+      )
+    )
+  })
+
   test_that("we cannot retrieve the oauth content credentials without a token or env var", {
     withr::local_options(list(rlib_warning_verbosity = "verbose"))
 
@@ -124,7 +147,6 @@ with_mock_api({
     client <- Connect$new(server = "https://connect.example", api_key = "fake")
     expect_true(validate_R6_class(client, "Connect"))
 
-
     credentials <- get_aws_content_credentials(client)
 
     expect_equal(