Concepts
Agent permissions
A connection belongs to your account, not to a single slot. When you approve an agent you decide which slots it can reach and what it can do in each.
What you choose
| Setting | Options | Default |
|---|---|---|
| Slots | All slots, including ones you create later; or only the slots you select | All slots |
| Level per slot | Read only, or read and write | Read and write |
| Create tables and change their structure | On or off. Never applies to official tables | Off, or on if you have a blank slot |
| Delete data | On or off. Deletion always shows a preview first | Off |
Creating tables and deleting data only take effect in slots where the agent can write.
Changing access
Open Connect agents in the console. For each connection you can:
- add or remove slots, or switch between all slots and selected slots;
- change a slot between read only and read and write;
- turn creating tables or deleting data on or off;
- see what it read and wrote recently.
Changes apply to the agent's next request.
Revoking
Choose Revoke connection and confirm. The agent loses access immediately. What it already wrote stays in your slots, with its name in the history.
API keys and apps
API keys and OAuth apps for developers follow the same model with their own scopes. See Developer overview.