The AI agents page

The AI agents page lists the AIs that work for your account and lets you decide what each may do. This page explains connections, levels, service access, keys for your own agent, the briefing, the activity view and revoking.

Where it is

Open the service list and click AI agents (KI-Agenten). Connected AIs are also listed in the AI agents section under your services; a click on one opens it for managing.

The page shows the Server address (MCP): https://spreadapi.io/mcp. This is the address every AI uses to connect to your account.

Connections (Verbindungen)

Each row is one connection. It shows:

• the name, for example "Claude";
• how it was made: signed in (angemeldet) or key (Schlüssel);
• when it was last used and how many calls it made;
• the expiry date, if one is set;
• its level: Use, Edit or Full access;
• its services: "All services, including new ones" or "2 of 5 services".

An account can have up to 25 connections.

Connect an AI

Click Connect an AI (KI verbinden) and choose what you work with.

With sign-in · no key (Mit Anmeldung · ohne Schlüssel):

• Claude: see Connect Claude.
• ChatGPT: see Connect ChatGPT.
• Claude Code: one command, then sign in in the browser.

With a key (Mit Schlüssel):

• Cursor: address and header for the MCP settings.
• Your own code (Eigener Code): MCP with the key in the header.
• Another AI (Andere KI): one address that contains the key, for clients that can add a server by address only.

Create a connection with a key

1. Choose Cursor, Your own code or Another AI.
2. Enter a Name, for example "Claude on my laptop".
3. Under This connection may (Diese Verbindung darf) choose the level.
4. Under For these services (Für diese Services) choose All services, including new ones (Alle Services, auch neue) or Only these (Nur diese) and tick the services.
5. Optionally set an Expiry date (Ablaufdatum). Access ends at the end of that day.
6. Click Create connection (Verbindung anlegen).

The next dialog shows the key. It is shown only now, so copy it before you close the dialog:

• For Cursor and Your own code: copy the address https://spreadapi.io/mcp and the header line Authorization: Bearer <your key>. Enter the address as the server and the second line as a request header.
• For Another AI: copy the address that contains the key and add it to your AI as an MCP server with authentication "none". Do not share this address.

Then Try it (Ausprobieren) with the prompt "Which services do I have at SpreadAPI?". Under "other ways to connect" the dialog also shows the address with the key, or the address and the header, whichever was not shown above. Clients with a header field should use the address without the key plus the header; that keeps the key out of the address.

If you lose a key, revoke the connection and create a new one. A key cannot be shown again.

The three levels

Each level includes the ones before it. Details: Rights and limits of a connection.

Service access

• All services, including new ones: every service of the account, also future ones.
• Only these: a ticked list. A service that is not chosen does not exist for this connection. What the connection creates itself is added to its list.

When you pick Use for a new connection, the choice starts on Only these, so that a narrow connection is not wide by accident.

Services with token protection can be called through a connection without a token: the connection is the access.

You can also set this from the service's side: on AI → Connect (KI → Verbinden), the list AI connections (under Your own AI) shows every connection with a checkbox. A connection on "all services" is ticked and cannot be unticked there.

Manage and revoke

Click Manage (Verwalten) on a connection to change its name, level, services or expiry date, then Save (Speichern).

To end a connection, click Revoke access (Zugriff widerrufen) in the same dialog and confirm. The AI loses access at once. Services it created stay.

Briefing for all AIs

Open Briefing for all AIs (Briefing für alle KIs). This section appears once an AI is connected.

• General briefing (Allgemeines Briefing): one text for every connected AI, up to 1,200 characters. Write what all of them should know about this account: what you calculate, the currency, how services should be named, "ask me before publishing". The briefing cannot widen what a connection may do.
• Defaults for services an AI creates → New services need a token (Neue Services brauchen ein Token): when on, a service created by an AI is protected by a token. Otherwise anyone with the address can call it once it is published.
• What a connected AI reads first (Das liest eine verbundene KI zuerst): a preview in the order the AI gets it: the fixed rules from SpreadAPI, then your briefing, then the defaults.

Click Save to apply.

Activity (Aktivität)

The activity section covers the last 91 days:

• the total number of calls and the number of active days;
• Calls today, Services created, Refused calls;
• Calls per day as a calendar view;
• Recent activity (Letzte Aktivität): sentences such as "Claude published "Loan calculator"" or "was refused: the connection may not do this". Use the filter to see one connection.

Days are counted in UTC. The list shows action, service and result of the last days, never the calculated values.

The main switch

AI access to this account (KI-Zugriff auf dieses Konto) switches all connections off at once. While it is off, every connection answers as if it did not exist. Nothing is deleted, and published services stay reachable for their callers. Switch it on again and the same connections work as before.

For developers and agents

• Address: https://spreadapi.io/mcp. Authentication: Authorization: Bearer <agent key>, or the header X-API-Key: <agent key>, or the key as the last part of the address (https://spreadapi.io/mcp/<agent key>), or the sign-in of Claude and ChatGPT.
• An agent key starts with spk_. It is shown once.
• Levels map to rights: Use = run; Edit = run, build; Full access = run, build, publish.
• A revoked, expired or mistyped key answers HTTP 401. The same happens while the main switch is off.
• An agent reads its own name, rights, service access and the owner's briefing with what_can_you_do (field account).

FAQ

Where do I see which AIs are connected to my account?

On the AI agents (KI-Agenten) page, which you open from the service list. Each connection shows its name, level, services, last use and number of calls.

How do I create a key for my own agent or script?

Click Connect an AI, choose Your own code, set name, level and services, and click Create connection. Copy the header Authorization: Bearer <your key> from the next dialog and send it with every request to https://spreadapi.io/mcp.

I lost the key of a connection. Can I see it again?

No. A key is shown only once, when the connection is created. Revoke the connection and create a new one.

How do I revoke an AI's access?

Click Manage (Verwalten) on the connection, then Revoke access (Zugriff widerrufen) and confirm. The AI loses access at once, and the services it created stay in your account.

How do I stop all AIs at once?

Switch off AI access to this account at the bottom of the AI agents page. Every connection then answers as if it did not exist; nothing is deleted and published services stay online.

What is the difference between Use, Edit and Full access?

Use lets an AI see services and calculate with them. Edit also lets it create and change services, and Full access also lets it publish.

Can I give an AI access to only some services?

Yes. In the connection's dialog choose Only these (Nur diese) and tick the services. Any other service does not exist for that connection.

What is the general briefing?

It is one text of up to 1,200 characters that every connected AI reads when it connects, after SpreadAPI's own rules. Use it for things like currency, naming and "ask me before publishing"; it cannot give a connection more rights.

Can I make every service an AI creates token-protected?

Yes. Under Briefing for all AIs switch on New services need a token and save. Services an AI creates from then on require a token for other callers.

Does the activity list show the values my AI calculated?

No. It shows the action, the service and the result (done or refused, with the reason), never input or output values.

Can a connection expire automatically?

Yes. Set an Expiry date (Ablaufdatum) in the connection's dialog; access ends at the end of that day (UTC). Leave it empty for no expiry.

As an agent, how do I find out what my connection may do?

Call what_can_you_do without arguments and read account: it holds connection, rights, service_access, the plan's limits and, if the owner wrote one, owner_briefing.