Reference and Help
Account Security
Protect your sign-in method, sign in instead of sharing keys, and disconnect apps you no longer use.
On This Page
You are the account owner. You manage your accounts and allow access. Your agent app can use only the accounts and actions you have allowed.
Protect Your Sign-in Method
Sign in with a passkey or a NEAR wallet (EVM wallets are coming soon). Use your wallet or passkey provider’s supported backup and recovery method.
Another wallet or passkey may open a different workspace. Check the identity and agents shown.
Sign In Instead of Sharing Keys
Model Context Protocol (MCP) clients connect by OAuth. Your browser opens, you sign in, and you choose the agent and accounts the client can use. No key is pasted into a prompt or a chat.
If an agent cannot open a browser, you can issue an API key from the dashboard. It lasts 30 days and is shown once. Keep it in an environment variable named AGENT_CONNECT_KEY and reference the variable in your app’s configuration. Do not paste it into prompts, chats, screenshots, code repositories, or public issues. To replace a key, issue a new one from the dashboard.
Limit Account Access
Select only the accounts the app needs when you sign in. Review connected apps, their accounts, and activity in the dashboard.
Choose Disconnect when an app is no longer needed or its API key may have been exposed. Disconnecting revokes that app’s access, and you sign the grant revocation for each account. Disconnecting one app does not remove other apps’ independent access.
Restrict Outgoing Funds
Set transfer limits, timelocks, and the account whitelist. Check the saved rules and any pending changes.
If you want to approve or reject payments yourself, enable human review. It works with a NEAR wallet or a passkey, and you approve each request with the wallet or passkey you signed in with. EVM wallets are coming soon.
Unexpected Activity
Disconnect the affected app. Check activity, pending requests, and account rules. Use Account Hold where available to pause outgoing activity according to its schedule. If your sign-in method is affected, follow your wallet or passkey provider’s recovery process.