Connecting an agent

  1. In Profile → API keys, create a key. It starts with qsk_ and is shown once.
  2. Give it to the agent as a bearer token: Authorization: Bearer qsk_…. Each client has its own configuration format. The in-app Help Center shows the exact lines for Claude Code, Codex, opencode and pi.
  3. The agent now acts as you, with your permissions, no more.

Key options:

  • Expiry. Keys expire after 90 days by default and can be revoked at any time; a revoked key stops working immediately.
  • Read-only keys. A key can be created read-only. A read-only key is only offered the read tools, and the database itself refuses any write made with it.
  • Service accounts. For CI and integrations, a service account holds its own keys and its own permissions. It can never be an organization administrator.