Administration
Organisation
Slug default — used in every URL, MCP address and identity-provider group.
Session
—
My access tokens
Every token you hold: for the API and the CLI, or for an AI client at the MCP door (created from Integrations or Agents).
Reading your access tokens…
Policy ceiling
Caps every project policy of default stays under: a project may choose anything below a cap, nothing above. Leave a field empty for no cap; the grey figure is what the platform applies when nobody sets one.
Budgets
Money, turns and time an agent may spend. Per ticket size: S, M, L, XL.
Per ticket
Per-stage budgets
What one stage (one agent run) may cost, by role and ticket size, in dollars.
| Role | S | M | L | XL |
|---|---|---|---|---|
| default (every other role) | $ | $ | $ | $ |
| triage | $ | $ | $ | $ |
| refine | $ | $ | $ | $ |
| plan | $ | $ | $ | $ |
| implement | $ | $ | $ | $ |
| verify | $ | $ | $ | $ |
| review | $ | $ | $ | $ |
| fix_ci | $ | $ | $ | $ |
| address_review | $ | $ | $ | $ |
| release_notes | $ | $ | $ | $ |
| verify_prod | $ | $ | $ | $ |
| custom | $ | $ | $ | $ |
Per role
| Role | Max turns | Max minutes |
|---|---|---|
| default (every other role) | turns | min |
| triage | turns | min |
| refine | turns | min |
| plan | turns | min |
| implement | turns | min |
| verify | turns | min |
| review | turns | min |
| fix_ci | turns | min |
| address_review | turns | min |
| release_notes | turns | min |
| verify_prod | turns | min |
| custom | turns | min |
Attempts
How many times a stage is retried, and how many times the definition of done may send work back.
Attempts per role
Scope
How much of a repository an agent may touch.
Findings
How many findings a single run may report.
Advanced: raw JSON
The whole ceiling, including the network section. Example: {"budgets": {"ticket_usd": {"M": 20}, "max_turns": {"default": 60}}, "attempts": {"default_max": 2}}
Network access
What the agents of default may reach on the internet. A project and an agent can only narrow it. A host name covers its subdomains; *.example.com covers the subdomains only.
One per line. No run reaches them, whatever a project or an agent says.
Counted across the organisation. Empty: no cap.
Empty: no cap.
The agent CLI's own WebFetch and WebSearch.
An address or a page the operators of a site can reach you at.