Project controls for AI agents

Give an agent scoped access to project data and approve changes. Apply to help shape future agent workspaces.

Choose what your agent can access

Use project-scoped API keys to inspect deployments, read redacted logs, and propose changes to apps you own.

Read the projects, deployments, redacted logs, and environment metadata a key is allowed to see.

Environment updates and redeployments wait for approval by default. Autonomous windows are explicit and time-limited.

Secret values and owner-only database connections are not returned through the agent API.

The project API is available for App Hosting. Agent workspaces are a private research program; self-serve agent compute is not available.

Explicit key scopes, redacted reads, approval-first writes, and bounded autonomous windows.

Discuss workspace jobs, repository access, network needs, and spending limits with the team.

Self-serve execution environments are not available. Applying does not grant access to agent compute.

Joining the program does not grant access to an agent computer, a production credential, or another customer's project.

Tell us what your agent needs to do and which repositories or services it must access.