Connecting an agent
- In Profile → API keys, create a key. It starts with
qsk_and is shown once. - Give it to the agent as a bearer token:
Authorization: Bearer qsk_…. Each client has its own configuration format. The in-app Help Center shows the exact lines for Claude Code, Codex, opencode and pi. - The agent now acts as you, with your permissions, no more.
Key options:
- Expiry. Keys expire after 90 days by default and can be revoked at any time; a revoked key stops working immediately.
- Read-only keys. A key can be created read-only. A read-only key is only offered the read tools, and the database itself refuses any write made with it.
- Service accounts. For CI and integrations, a service account holds its own keys and its own permissions. It can never be an organization administrator.