> ## Documentation Index
> Fetch the complete documentation index at: https://docs.yorlet.com/llms.txt
> Use this file to discover all available pages before exploring further.

# External agents

> Create an agent key so Claude or ChatGPT can authenticate to Yorlet.

export const OverflowMenu = () => {
  return <span>overflow menu (•••)</span>;
};

An agent key lets a tool outside the Dashboard talk to Yorlet as an agent. Writes still go through [agent policy](/business-automation/ai/policy) and land in [Approvals](/business-automation/ai/approvals) when they need a person.

Create and revoke keys from [API keys](https://dashboard.yorlet.com/developers). To connect Claude or ChatGPT, see [MCP](/business-automation/ai/mcp).

<Warning>
  Treat an agent key like a password. It is shown once. If you think it has leaked, remove it and create a new one.
</Warning>

## Create an agent key

To create an agent key, follow these steps:

1. Go to the [API keys](https://dashboard.yorlet.com/developers) page.
2. Under **Agent keys**, click **Create agent key**.
3. Enter a **Name**. This is how the agent appears in events and the Approvals inbox — for example `Claude` or `ChatGPT`.
4. Optionally enter a **Note** for where the key is used.
5. Click **Create**.
6. Copy the key and store it somewhere safe. You cannot view it again.

You need access to Developers to create a key.

The reveal step tells you to use the key as a Bearer token against `POST /v1/mcp`. That is the [MCP](/business-automation/ai/mcp) endpoint you paste into Claude or ChatGPT.

<Note>
  Agent keys are not a substitute for secret or restricted API keys. Use a [secret or restricted key](/development/api-keys) when your own systems call the Yorlet API as an integration, not as an agent.
</Note>

## Remove an agent key

To remove an agent key, follow these steps:

1. Go to the [API keys](https://dashboard.yorlet.com/developers) page.
2. Find the key under **Agent keys**.
3. Open the <OverflowMenu /> and select **Remove**.

The client that used that key will stop authenticating immediately.