Connected AI agents
Let an AI agent such as Claude or Cursor work in your RevKeen account, approve exactly what it may do, and take that access away again
A connected AI agent is an assistant you run yourself, such as Claude, Cursor or an in-house tool, that asks for permission to work in your RevKeen account. You decide exactly what it may do, and you can take that access away at any time from Settings → AI agents.
This is different from Ask RevKeen and Agent Studio, which are built into your dashboard, and from apps connected over MCP.
- How an agent asks for access, and how you approve or deny it
- What an approved agent can do today, and what it can never do
- How long access lasts
- How to remove one permission, one agent, or everything on a device
How an agent asks for access
- The agent connects to RevKeen and asks for the permissions it needs, for example "List invoices" or "Create a customer".
- The agent shows you a link, or a short code. The request also appears under Settings → AI agents → Pending requests.
- Open the link or the pending request. You see who is asking and what it wants. Nothing is ticked at the start.
- Tick what the agent may do and press Approve, or press Deny all. Anything you leave unticked is denied.
- For most permissions, RevKeen then asks you to confirm with your passkey.
A request lasts 5 minutes. If it expires, ask the agent to request access again.
Only the owner who connected the agent can approve its requests. Admins and members cannot, and nor can RevKeen staff working on your account.
RevKeen does not verify an agent's name. An agent can call itself anything, including "RevKeen Support". Approve a request only if you started it from your own device.
What an approved agent can do
Each permission carries a label: READ, SETTINGS, MOVES MONEY or NEVER ALLOWED.
| Label | What an agent can do with it today |
|---|---|
| READ | Look up records you can see, such as invoices, customers, products, subscriptions and reports. |
| SETTINGS | Make five kinds of change: create a customer, update a customer, create a product, update a product, and add a comment to an invoice. Other settings permissions may appear in a request, but RevKeen refuses to carry them out for now. |
| MOVES MONEY | Nothing yet. An agent cannot refund, charge or move money, even if a request asks for it. |
| NEVER ALLOWED | Nothing, ever. Some actions, such as setting up a Direct Debit mandate, can never be given to an agent, so these rows have no tick box. |
An agent never gets more access than the person who connected it. If that person's role changes, or they leave your account, the agent's access shrinks or stops with it.
If an agent retries a change, for example after a network error, RevKeen carries it out only once.
RevKeen records every change an agent makes, which agent made it, who connected it and who approved it.
How long access lasts
| Permission | Access ends after |
|---|---|
| READ | 7 days |
| SETTINGS | 1 day |
You cannot choose a longer time. When access ends, the agent has to ask again and you approve it again.
Take access away
On Settings → AI agents, agents are grouped by the device or server they connected from. Only an owner sees these controls, and each one asks you to confirm first.
| Control | What it does | Use it when |
|---|---|---|
| × on a permission | Removes that one permission. The agent keeps the rest. | The agent should stop doing one particular thing. |
| Revoke on an agent | Removes all its permissions and switches it off. | You no longer want this agent. |
| Revoke host | Switches off the device or server, and every agent on it. | A laptop or key may be lost or compromised. |
An owner can revoke any agent in the account, including one another member connected. Removal takes effect straight away and cannot be undone. To give access back, the agent has to connect and ask again.
Owner: david · Reviewed 10 Oct 2026