Skip to main content
An access bundle defines the list of services (external APIs) that an AI agent can access during a session. You can reuse access bundles across as many sessions as you like. This makes them useful for scoping what services an agent can access depending on its task. For example, you might have:
  • A code-review bundle that grants access to GitHub and Slack
  • A customer-feedback bundle that grants access to Discord, Resend, and Slack
  • A marketing bundle that grants access to Twilio and Google Docs
The Access Bundles page listing four access bundles with their services and member counts

​
Create an access bundle

To create a new access bundle:
1
In Agent Vault, go to Access Bundles and select Create Access Bundle.
2
Give the bundle a name that says what job it’s for, like code-review or marketing.
3
Select Create. The access bundle will appear in the list.
Now you can add services to the access bundle so agents using it can make authenticated requests.

​
Manage access to access bundles

Since access bundles provide authentication to external APIs, members of your organization can’t create sessions with them by default. They need explicit access for each bundle.

​
Grant access

To allow a user, group, or machine identity to create sessions for a given access bundle:
1
Make sure the user, group, or machine identity is a member of Agent Vault. If not, add them under Access Control.
2
Open the access bundle from Access Bundles and select Options > Manage Access. Then, select Grant Access.
3
Select the user, group, or machine identity you want to grant access to. Then, select Grant Access.

​
Revoke access

To revoke access from a user, group, or machine identity, open the bundle and select Options > Manage Access. Find them with the search box, open their actions menu, and select Revoke Access. If any of their agents are running, those agents lose the bundle’s credentials within one poll interval.