> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Access bundles

> Lists of services that AI agents can access during a session.

An access bundle defines the list of [services](/docs/documentation/platform/agent-vault/services) (external APIs) that an AI agent can access during a [session](/docs/documentation/platform/agent-vault/sessions).

You can reuse access bundles across as many sessions as you like. This makes them useful for scoping what services an agent can access depending on its task. For example, you might have:

* A **code-review** bundle that grants access to GitHub and Slack
* A **customer-feedback** bundle that grants access to Discord, Resend, and Slack
* A **marketing** bundle that grants access to Twilio and Google Docs

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/access-bundles-list.png" alt="The Access Bundles page listing four access bundles with their services and member counts" />
</Frame>

## Create an access bundle

To create a new access bundle:

<Steps>
  <Step>
    In Agent Vault, go to **Access Bundles** and select **Create Access Bundle**.
  </Step>

  <Step>
    Give the bundle a name that says what job it's for, like **code-review** or **marketing**.
  </Step>

  <Step>
    Select **Create**. The access bundle will appear in the list.
  </Step>
</Steps>

Now you can [add services](/docs/documentation/platform/agent-vault/services#add-a-service) to the access bundle so agents using it can make authenticated requests.

## Manage access to access bundles

Since access bundles provide authentication to external APIs, members of your organization can't create sessions with them by default. They need explicit access for each bundle.

### Grant access

To allow a user, group, or machine identity to create sessions for a given access bundle:

<Steps>
  <Step>
    Make sure the user, group, or machine identity is a member of Agent Vault. If not, [add them under Access Control](/docs/documentation/platform/agent-vault/access-control#adding-members).
  </Step>

  <Step>
    Open the access bundle from **Access Bundles** and select **Options** > **Manage Access**. Then, select **Grant Access**.
  </Step>

  <Step>
    Select the user, group, or machine identity you want to grant access to. Then, select **Grant Access**.
  </Step>
</Steps>

### Revoke access

To revoke access from a user, group, or machine identity, open the bundle and select **Options** > **Manage Access**. Find them with the search box, open their actions menu, and select **Revoke Access**. If any of their agents are running, those agents lose the bundle's credentials within one [poll interval](/docs/documentation/platform/agent-vault/proxies#poll-interval).