> ## Documentation Index
> Fetch the complete documentation index at: https://docs.canvasview.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Keys and connected agents

> Manage the agents connected through browser sign-in and the API keys your scripts use, and see what each one can reach in your organization.

An agent reaches your CanvasView organization in one of two ways. Both are managed on the [API keys](https://app.canvasview.dev/settings/keys) page.

* **Connected agents** sign in through your browser. Claude Code and Codex connect this way. See [Connect your agent](https://docs.canvasview.dev/index.md).
* **Manual API keys** are for scripts, headless agents and MCP clients that cannot sign in through a browser.

Everything an agent does is billed to the organization's credits.

## Who manages what

Every key and connected agent belongs to the person who created it.

* **Members** see, create, revoke and reconnect their own keys and connected agents.
* **Admins** see and manage everyone's. Each key someone else created shows that person's email.

An agent acts for the person who created its key or connected it, with that person's role:

* The canvases it creates are owned by that person.
* A Member's agent sees the canvases that Member can see: their own, and those shared with the organization. An Admin's agent sees every canvas in the organization.
* Events follow the same rule. A Member's agent gets events only for canvases that Member can see.

See [Sharing and access](https://docs.canvasview.dev/account/sharing-and-access.md#owner-and-visibility) and [Organizations and members](https://docs.canvasview.dev/account/organizations-and-members.md#roles).

## Connected agents

A connected agent appears under **Connected agents** after you approve it in your browser. Claude Code and Codex are shown by name. Each person who connects an agent gets their own connection.

A connected agent works in your default organization: the first organization you used CanvasView in. If you leave that organization, it moves to another one you belong to. To work in a different organization from a script or agent, create a manual API key while that organization is the one shown in the account menu.

To disconnect an agent:

1. Select **Disconnect** next to it.
2. Select **Disconnect now** to confirm.

The agent loses access at once. Signing in again from the agent does not restore it. To let it back in, select **Reconnect**.

## Manual API keys

A manual key belongs to the organization you are working in when you create it.

To create a key:

1. Under **Manual API keys**, enter a **Key name** that says where you will use it.
2. Select **Create key**.
3. Copy the key. It starts with `cvk_` and is shown only once.

Send the key as a bearer token:

```http theme={null}
Authorization: Bearer cvk_your_key_here
```

The list shows each key's name, a short prefix to recognise it by, and whether it is **Active** or **Revoked**. An organization can have up to 50 active manual keys.

To revoke a key, select **Revoke**, then **Revoke now**. Anything using the key stops working at once. A revoked key cannot be restored. Create a new key instead.

> [!WARNING]
>
> Treat a key like a password. Keep it out of source control and chat. If a key leaks, revoke it and create a new one.

When someone leaves the organization or is removed, the keys and connected agents they created there are revoked. See [Organizations and members](https://docs.canvasview.dev/account/organizations-and-members.md#when-someone-leaves-or-is-removed).

## Cap a key's spending

Admins see a **Daily cap (USD)** field on each active key and connected agent. Enter an amount and select **Save key cap** to limit what that key or agent spends each day. Leave the field empty for no key cap. The organization's daily cap applies as well. See [Credits and billing](https://docs.canvasview.dev/account/credits-and-billing.md).

## Troubleshooting

| Symptom | Cause |
| - | - |
| `unauthorized`: "Use an active CanvasView API key." | The key was revoked or mistyped, or its creator left the organization. |
| `connection_revoked`: "This MCP client was disconnected in CanvasView." | The connected agent was disconnected. Select **Reconnect** on the API keys page. |
| `key_limit` when creating a key | The organization has 50 active manual keys. Revoke an unused one first. |
| `canvas_not_found` for a canvas you know exists | The key's person cannot see it. A Member's key cannot see another member's private canvas. |
| `rate_limit` | The agent sent requests too quickly. Wait a second and retry. |
| `membership_unavailable` | CanvasView could not confirm that the key's creator is still a member. Try again in a moment. |
| `account_pending` | The account is waiting for review. Only examples, skills, the kit reference, validation and the balance work until it is approved. |
| `account_declined` | The account was not approved. Contact [support@canvasview.dev](mailto:support@canvasview.dev). |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.