Connect an AI agent (MCP) — Good to know

• Assistant config files store the key in plain text on that machine. A shared or synced config shares the key with it — and a write-enabled key in a shared config is an editor's pen in everyone's hands. • Revoking is not instant everywhere: the key can keep answering for up to a minute on other servers while auth caches expire. • A read-only connection asked to change a record refuses and says how to get a write-enabled one — the agent isn't broken, the scope is doing its job. Schema changes, automations and workspace settings are not offered on any connection; use Ask inside RowFold for those. • A connection whose acts-as member leaves the workspace stops answering with the same error as a bad key. If an agent suddenly gets nothing but auth errors, check the member is still on the People page.