Service accounts and AI agent access

Service Accounts in Settings creates credentials for an AI agent to connect to your Brainito account, through the MCP Integration endpoint POST https://brainito.com/api/mcp.

Empty state: No service accounts yet. Create one to connect an AI agent.

Creating one

Click Create service account, give it an Agent name — something that identifies which agent it is for, since you will otherwise not remember — and choose its Scopes.

Scope it as narrowly as the job needs. A read-only agent that leaks is a much smaller problem than one that can write.

Copy the key immediately

The dialog is explicit: This key will not be shown again. Copy it now and store it securely.

There is no way to reveal it later. If you lose it, delete the service account and create another — which is inconvenient rather than dangerous, but worth avoiding by pasting it somewhere safe before closing the dialog.

Watching it

Each shows Created:, Last used: and Last IP:, and a status of Active.

Last used is the column that earns its place. An agent key with no recent use is one you can delete, and every credential you delete is one fewer thing that can leak. Last IP is worth a glance too — traffic from somewhere unfamiliar deserves a question.

Requirements

No plan is needed — service accounts are open to every account. Work an agent does is paid in credits exactly as if you did it in the app: an audit started by an AI agent is 100 credits, the same as one you start yourself.

Service accounts versus API keys

• API keys — your own scripts and tools. See Create and manage API keys.
• Service accounts — an AI agent connecting over MCP.

Both are credentials to your account and both deserve narrow scopes.

Next: open Settings → Service Accounts, and check Last used on anything you created and forgot.