Help: Security¶‹ Previous Next ›

The Security pages (user menu → Settings → AI permissions) are where you decide what your AI can reach and do on a project. They are three tabs:

AI tokens (/ai/tokens): a token lets an AI, or a program such as a sync plugin, act as you on this project, at most at the level you pick and never above your own role. Make one, give it to your AI, renew it or end it here. The page's own steps show how to give it to your AI.
Vault (/ai/vault): secrets your agents need (a key for another service). Only you and the agents you allow can use them; a value is never shown again after saving. More: Vault.
Permissions (/ai/permissions): for every action, whether your AI does it on its own, tells you, asks you first, or leaves it to a person. More: Permissions.

AI tokens¶

A token acts as you in this project only, at most at the level you pick, and never above your own role: if yours drops, the token's does too.
Role, scope and level don't change once a token is made: revoke it and make a new one.
Role tokens mint one agent token per run. A token's value shows once, when it's made.
Tool tokens are for a program acting for you (a sync plugin, a connector). They work directly, under their own name, and mint nothing.