Last updated: 2026-09-20 · 2 min read

Rooms, sources, connections, and permissions

An Agent operates within its published Room and the materials and connections allowed by its design. It does not freely read customer information across Rooms. Begin with the minimum sources and permissions, then expand only after reviewing results.

Agent Settings

The opening image is the Agent Settings tab (1280). Confirm the name, capabilities, scope, and who runs it here.

An Agent references only its selected Room, materials, and permitted connections

What an Agent can use

InformationHow it is used
Room informationThe selected Room's summary, pages, tasks, and conversations can be referenced when relevant
Added materialsMeeting notes and files selected in Create an Agent inform the design and evaluation
MCP and connectionsSettings shows the built-in capabilities available in the Room. It does not add arbitrary MCP servers or edit connection tokens.

“Knowledge” and context mean the material available to the Agent. They are not a screen where users directly edit the system-generated internal Context. You control the Room, materials, connections, output, and execution boundary instead.

Before using a connected capability

  1. In Settings, confirm that the listed built-in capability is needed for the job.
  2. Decide in Design whether reading, drafting, updating, or sending is required.
  3. Include every write or delivery case in Tests.
  4. Check the capability scope and result in Run history after you publish.

The approved Agent definition, Room scope, and short-lived execution token determine what can run. This screen is not a place to register an arbitrary MCP server or manage credentials.

Who can do what

ActionRequired access
View Run history, Results, and available connectionsInternal Room member
Create an Agent, publish, or configure Run now and scheduled runsInternal Room editor
Manage evaluation cases or create and enable webhooksInternal Workspace administrator
Use Agent StudioExternal members are not eligible

Webhook secrets must be stored in an approved secret store at creation. Never paste them into prompts, Room materials, Run history, or support requests.

Related articles

Rooms, sources, connections, and permissions | Help center