The User Managed Access Protection API indicates The Authorization Server MUST OAuth Token Profile declare within the Uma-configuration.
There is the JSON Web Tokens.
Access Token Response shows the Token_type.
UMA Bearer Token Profile