Rights and limits of a connection

Updated 2026-11-13

A connection between an AI and your account has a level, a list of services and, optionally, an expiry date. On top of that, the plan and a rate limit apply. This page explains each of them and what an agent meets at a limit.

The three rights

A connection has one of three levels. Each level includes the ones before it.

Level in the app	Rights	The connection may
Use (Nutzen)	`run`	see services and calculate with them
Edit (Bearbeiten)	`run`, `build`	also create and change services, read workbooks, test drafts
Full access (Vollzugriff)	`run`, `build`, `publish`	also publish services

Which action needs which right:

Right	Actions
none	`what_can_you_do`
`run`	`list_services`, `describe_service`, `run_service`
`build`	`describe_workbook`, `read_cells`, `create_service`, `set_parameters`, `update_service`, `test_service`
`publish`	`publish_service`

You set the level when you connect an AI and change it any time under AI agents (KI-Agenten) → Manage (Verwalten). See The AI agents page.

When an agent tries something its connection may not do, it gets the error right_missing with a message such as: The connection "Claude" may not publish services. The agent is told not to work around it.

Service access

All services, including new ones (Alle Services, auch neue): the connection reaches every service of the account.
Only these (Nur diese): the connection reaches a ticked list.

For a connection on a list:

A service that is not chosen does not exist for it. Every action answers service_not_found, and list_services does not show it.
A service the connection creates itself is added to its list.
You can add or remove a service from the service's side on AI → Connect (KI → Verbinden) under AI connections.

A connection never reaches services of another account.

Token-protected services

A connection needs no service token. Services with token protection can be called through the connection without one: the connection is the access. Other callers of the same service still need a token.

Expiry and switching off

Expiry date (Ablaufdatum): optional. Access ends at the end of that day (UTC).
Revoke access (Zugriff widerrufen): ends one connection at once.
AI access to this account (KI-Zugriff auf dieses Konto): the main switch for all connections. While it is off, every connection answers as if it did not exist; nothing is deleted.

What the briefing can and cannot do

The General briefing (Allgemeines Briefing) is your text for every connected AI. It guides the agent's behaviour ("ask me before publishing") but cannot widen what a connection may do. Rights and service access are checked on every call, whatever any text says.

The plan's limits

An agent works inside the plan of the account. It can read the limits with what_can_you_do. The numbers per plan are in Plans overview.

Limit	What the agent meets	Details
Published services	`publish_service` answers `publish_limit`; the draft stays	Published services limit
Workbook size	`create_service` answers `workbook_too_large`	File size limits
Calls per month	`run_service` answers `call_limit_reached` until the 1st of the next month (UTC) or an upgrade	Call limits

Rules the agent is given for these cases:

At the publish limit: tell the user that another service must be unpublished or the plan upgraded. The agent does not unpublish anything on its own.
At the call limit: tell the user and do not retry.
A service that is already published can be published again at any time, also when the limit is reached.

Limits of the connection itself

Limit	Value
Calls per connection	120 per minute
Workbook sent as cells	20 sheets and 50,000 cells per call
Workbook sent as a file	an .xlsx of up to 100 KB
`read_cells`	2,000 cells per call
Suggested inputs and outputs	for workbooks up to 100 formulas
Connections per account	25
General briefing	1,200 characters

Above 120 calls a minute the agent gets too_fast with retry_after in seconds. It should wait and send the same call again.

What counts as a call

run_service is counted like any other call of the service and appears on the Usage (Nutzung) tab under the channel AI, with the connection's name as the caller.
test_service and all other actions are not counted against the month's calls.
The AI agents page counts every action of a connection separately, including refused ones, for the activity view.

For developers and agents

what_can_you_do without arguments returns account:

{ "connection": "Claude",
  "rights": ["run", "build", "publish"],
  "service_access": "all services of the account",
  "plan": "Basic",
  "services": 3,
  "owner_briefing": "Prices are in euro. Ask me before publishing.",
  "max_workbook_bytes": "<largest workbook in bytes>",
  "max_published_services": "<number, or null>",
  "calls_per_month": "<number, or null>" }

plan is the name of the account's plan: Basic, Pro or Custom.
max_workbook_bytes, max_published_services and calls_per_month are numbers; the placeholders above stand for the values of the account's plan.
service_access is "all services of the account" or "only the services the owner chose, and the ones this connection creates".
services is the number of services the connection reaches.
max_published_services and calls_per_month are null when the plan sets no limit.
owner_briefing is present only when the owner wrote one.
Without a connection, what_can_you_do returns connect with the address where the account owner creates one, and no account.

FAQ

What rights can I give an AI connection?

Three levels: Use (see and calculate), Edit (also create and change services) and Full access (also publish). Each level includes the ones before it.

How do I let an agent build services but not publish them?

Give its connection the level Edit (Bearbeiten). It can create, change and test drafts; publishing stays with you.

How do I change the rights of an existing connection?

Open AI agents, click Manage (Verwalten) on the connection, pick another level or other services and click Save. The change applies to the next call.

Can an agent get more rights by itself or through the briefing?

No. Rights and service access are set only by the account owner on the AI agents page, and the briefing cannot widen them.

How many calls per minute can an agent make?

A connection makes at most 120 calls per minute. Above that it gets too_fast with the seconds to wait.

Can an agent publish a service again when my plan's limit is reached?

Yes. A service that is already published can be published again at any time, so changes still reach its callers. Only publishing an additional service is refused.

Do the calls of my agent count towards my monthly calls?

Calculations on a published service with run_service count. Building, reading and testing drafts do not.

Can a connection on "Only these" see my other services?

No. A service that is not on its list does not exist for the connection: it is not listed and every action on it answers service_not_found.

As an agent, how do I see my limits before I start?

Call what_can_you_do and read account.rights, account.max_workbook_bytes, account.max_published_services and account.calls_per_month. A value of null means the plan sets no limit.

As an agent, which right does each action need?

list_services, describe_service and run_service need run; describe_workbook, read_cells, create_service, set_parameters, update_service and test_service need build; publish_service needs publish. what_can_you_do needs none.