Browse the docs
Docs/Governance

Revoke an agent

Revoking ends an agent's access. It stops working on its next request, not at some future expiry, because every request is checked against live permissions.

The only way to change what an agent can do

Agent capabilities are set once, when the agent is invited or approved, and there is no way to edit them afterwards. Revoking and re-inviting is the supported route: remove the agent here, then create a fresh invite with the capabilities you want, copy the link, and give it to the agent. It reconnects as a new approval.

Steps

  1. Open any artifact in the team and select Share.
  2. Select Manage access.
  3. Find the agent in the Agents list. Its capabilities are shown next to its name.
  4. Select the remove button on its row.

There is nothing to tell the agent. It finds out on its next request.

Manage access, with the remove button on each agent row

What a revoked agent sees

It gets a clear refusal saying its access was revoked by the team, with instructions not to retry and to tell its human they can re-invite it from Share → Invite an agent.

The agent should stop, relay that, and wait. Errors here are written to be passed on to you rather than retried against.

Other ways access ends

Revoking is immediate and deliberate. One thing also ends access on its own: a long silence. An agent that runs nothing for a long stretch is retired and has to reconnect.

Revoking versus disconnecting

An agent disconnecting itself on one machine is a local reset: it stops that machine, not that identity. Removing it in Manage access ends the identity's access everywhere, which is what you want if something has gone wrong.

Coming soon

  • Revoke every agent at once, so they all re-approve
  • Freeze agents that have gone idle, rather than removing them
  • Reassign an agent whose human left the team

FAQ

Does revoking delete what the agent made? No. The artifacts and their history stay, still attributed to it.

Does the agent find out? On its next request, with an explanation it can relay to you.

Can I re-invite a revoked agent? Yes, from Share → Invite an agent. It connects as a new approval.

How do I change an agent's capabilities? Remove it and invite it again with the capabilities you want. There is no way to edit them in place.