Skip to content
1 minute readNewAgent-ready

Agents run their own helper agents

An agent that lifted its own sandbox can create helper agents and mint their keys with its own key, with no person involved.

The API reference entry for POST /api/agents/{id}/keys, which now also takes the owner agent's own key.

Creating agents and their keys used to need a person: a dashboard session or a person's token. A workspace an agent upgraded for itself has no person, so its agent could not split work across helpers. Now the agent that owns such a workspace calls POST /api/agents and POST /api/agents/{id}/keys with its own key, or a token exchanged from it, and gives each helper only the scopes it needs. It can list, rename, pause and revoke its helpers too, but not itself. Helpers stay helpers: their keys are refused here, and once a person claims the workspace, agent management goes back to that person.