Skip to main content
An agent key lets a tool outside the Dashboard talk to Yorlet as an agent. Writes still go through agent policy and land in Approvals when they need a person. Create and revoke keys from API keys. To connect Claude or ChatGPT, see MCP.
Treat an agent key like a password. It is shown once. If you think it has leaked, remove it and create a new one.

​
Create an agent key

To create an agent key, follow these steps:
  1. Go to the API keys page.
  2. Under Agent keys, click Create agent key.
  3. Enter a Name. This is how the agent appears in events and the Approvals inbox — for example Claude or ChatGPT.
  4. Optionally enter a Note for where the key is used.
  5. Click Create.
  6. Copy the key and store it somewhere safe. You cannot view it again.
You need access to Developers to create a key. The reveal step tells you to use the key as a Bearer token against POST /v1/mcp. That is the MCP endpoint you paste into Claude or ChatGPT.
Agent keys are not a substitute for secret or restricted API keys. Use a secret or restricted key when your own systems call the Yorlet API as an integration, not as an agent.

​
Remove an agent key

To remove an agent key, follow these steps:
  1. Go to the API keys page.
  2. Find the key under Agent keys.
  3. Open the and select Remove.
The client that used that key will stop authenticating immediately.