---
title: Manage connected AI clients
description: "See which AI clients have access to your organisation, what each one was approved for, when it was last used, and how to revoke one for good."
section: AI agents
order: 80
audience: [owner, admin, member, agent-user]
status: published
lastVerified: 2026-09-15
sources:
  - web/src/components/app/pages/AgentsPage.tsx
  - src/mcp/consent.ts
  - src/objects/routes/mcp.ts
---

Open **AI agents**. Under **Connected clients** you'll see every AI client you've connected to this organisation:

| Column | Shows |
| --- | --- |
| **Client** | The name the client gave, and its key underneath. |
| **Roles** | The roles you approved for it. |
| **Status** | **Active**, **Revoked**, or **Expired**. |
| **Last used** | When it last made a request, or **Never**. |
| **Expires** | When the access runs out, or when it was revoked. |

Owners and Admins also get **Yours** and **Everyone** tabs. **Everyone** lists every client connected by anyone in the organisation, with a **Member** column saying who connected it.

## Revoke a client

1. Select **Revoke** on its row.
2. Select **Revoke access** to confirm.

The client loses access straight away and has to be connected again to keep working. Download links it hasn't used yet stop working too. A storage download it had already started can finish, since those links last up to 60 seconds.

Owners and Admins can revoke anyone's client from the **Everyone** tab, for example when someone leaves or a laptop is lost.

## Delete an old entry

Revoked and expired clients stay in the list. Select **Delete**, then confirm, to remove one. Its activity stays in the [audit log](/docs/audit/overview/).

## Other things that cut a client off

A client only keeps the permissions of its roles that are still assigned to the person who connected it. So it also loses access when:

- one of its roles is removed from that person, or edited to allow less,
- that person is removed from the organisation,
- the access reaches its expiry date.

When the problem is one client, revoke that client rather than changing roles that people also use.