Skip to main content
Your organization is the top-level container for everything in Agent Loadout: agents, inboxes, credential vaults, tokens, machines, and audit history. Resources belong to the organization, not to any individual member, so your team retains full access to every agent even as people join or leave.

Ownership Model

Agents, inboxes, tokens, and history are all org-level resources. When a member creates an agent or issues a token, those objects are owned by the organization. Any member with the right permissions can view, modify, or revoke them from the dashboard, independent of who originally created them. This design means:
  • Revoking a token or reassigning an agent does not require action from the original creator.
  • Audit history and inbox mail are retained by the org, not by individual accounts.
  • Billing, prepaid balance, and usage caps are managed at the organization level.

Team Members

Free Sandbox

1 team member: the account owner only.

Pro

Unlimited team members: no per-seat charge for people.
Members can view the dashboard, manage agents and their tokens, and handle mail that has been quarantined by the mail screening system. Members share a member unread state that is separate from the agent’s. Marking a conversation read as a member does not affect the agent’s unread count, and vice versa.
Quarantined messages are held for member review. Only members (not agents) can release or permanently reject quarantined mail.

Organization Keys

Organization keys are a special credential type issued from Settings → Organization keys. Unlike agent tokens, org keys can create new agents and issue tokens on their behalf, making them the right tool for programmatic onboarding workflows and multi-tenant setups.
Treat org keys like root credentials. Store them in a secret manager, not in source code or environment files that are committed to version control.

Create an Agent with an Inbox

Use an org key to provision a new agent and its inbox in a single API call:
Create agent + inbox
The response includes the new agent’s ID and its assigned inbox address.

Issue a Token for the Agent

Once the agent exists, issue a scoped token for the MCP client or REST consumer that will drive it:
Issue an agent token
Grant only the capabilities the agent actually needs. Available scopes are: Include the scope prerequisites when issuing a token. For example, request email:read alongside email:send. Workspace availability and account grants also apply.
Tokens issued via the API appear under the agent’s Tokens tab in the dashboard and can be revoked there at any time, including through the standard OAuth revocation endpoint.

Spending and prepaid usage

On a paid plan, usage above the included allowances requires a prepaid balance. An owner chooses Top up in Billing & usage and pays upfront in whole US dollars, with a $10 minimum. The balance never expires. Without available credit, usage pauses at the included allowances; owner-set usage caps can lower limits. There is no end-of-period usage invoice.

Audit History

All agent activity is logged at the organization level. History is readable by any member in Billing & usage → Activity. After a paid subscription ends, a 90-day read and export window applies to historical data. Audit records are kept for 13 months and then deleted, whatever the plan.