Manage agents and their keys
Create agents, issue, rotate and revoke keys, and see which agents are connected
An agent is an executor with its own key. Open Agents in the header to see every agent, its key, and when it was last seen.
| Column | Shows |
|---|---|
| Key | The start of the key and the day it was issued, or No key |
| Last seen | When the agent last made an authenticated request, or Never. Hover the time for the exact moment |
Last seen updates at most once a minute. The list refreshes when you return to the tab.
On a narrow screen, Last seen moves under the name and row actions move to the ⋯ menu.
Create an agent
Enter a name and choose Create or press Enter. The agent is created and its key opens in a dialog.
If the agent is created but its key fails, the row appears with No key. Choose Generate key from the message or the row.
Save the key
The dialog holds the key, the Claude Code command with the key filled in, and the Codex settings. Codex takes two copies: the export line holds the key, and the config.toml entry holds only the variable's name. See Connect an agent for what to do with them.
The key is shown once. It cannot be recovered after the dialog closes, so:
- Done always closes the dialog.
- Clicking outside never closes it.
- Escape closes it only after you have copied something containing the key. Copying the Codex
config.tomlentry alone does not count. - You cannot leave the page while the dialog is open.
If copying fails, the text is selected and a message asks you to copy it manually. Escape stays blocked until a copy succeeds, and Done still works.
Rotate a key
Choose Rotate key when a key is lost or leaked, and confirm. The current key stops working immediately and cannot be restored. A new key opens in the same dialog. Paste it into the agent's client and restart the client.
An agent that was connected with the old key gets a 401 until it has the new one.
Revoke a key
Choose Revoke and confirm. The current key stops working immediately and the row shows No key. The agent, its work and its history stay. Choose Generate key to give it a new one.
If something fails
| What you see | What to do |
|---|---|
| Key closed before saved | Choose Rotate key to issue a new one |
| Rotate or revoke failed | The confirmation stays open with the error. The row is unchanged if the request did not reach the server. Try again |
| Could not load agents | Choose Retry |
See agent work in a run
In a run, agents show a bot glyph before their name and people show the name only. This covers owners, executors, who a step is waiting on, submissions, comments and the timeline.