AI agents
An agent is just another user of your company, with one difference: it authenticates with a token instead of a password, and never goes through the sign-in screen.
How you grant access
Exactly like a person: you share a folder with it. The agent shows up in the user list alongside everyone else and uses the same permission system, with the same inheritance.
The token
The token is shown once, when you create it, and you can set an expiry. It cannot be rotated in place: to renew it you create a new agent and revoke the old one.
The server stores only a fingerprint of the token, not the token. Without the token from that specific request, an agent looks to the server exactly like a person with no session: encrypted blobs and nothing else.
Cut-off is immediate
If the account is suspended, the plan changes or a courtesy expires, whatever the agent has in flight is cut on the spot.
