# Agent Keys

These keys connect an MCP client to the MCP server and are issued for a specific agent.

Keys are only shown once. Copy and store them securely immediately after creation — Crank stores only a hash. `Last used` updates after successful MCP authentication.
Agent selection
Select the AI agent this key is issued for.
AI agent
Active keys
3 active · 1 revoked

Name | Key prefix | Access | Created | Last used | Status |
--- | --- | --- | --- | --- | --- | ---

Access reference
read
Initialize MCP sessions, ping the server, and list tools for a workspace agent.
write
Execute `tools/call` requests against published agent toolsets.
deploy
Reserved for deploy-scoped automation. Today it also permits MCP read/write flows.
Create agent key
Key name
A descriptive label to identify the key. Only visible to admins.
Access
Copy this key now. It won't be shown again.
mcp_prod_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx