> ## Documentation Index
> Fetch the complete documentation index at: https://support.myapps.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Agents & plugins

> Let an external app act on your Pixio account, and revoke it when you're done

Some tools connect to Pixio without you ever pasting a key. Instead the app asks for access, you approve it in the browser while signed in, and it receives its own session.

## How authorization works

<Steps>
  <Step title="The app requests access">
    A plugin or agent starts an authorization session and opens Pixio in your browser.
  </Step>

  <Step title="You approve while signed in">
    You land on the Pixio authorization page. Because you're signed in, Pixio knows which account is granting access. Approve, and that session is linked to the requesting app.
  </Step>

  <Step title="The app picks it up">
    The app polls until authorization completes, then holds its own session — no key copied by hand, no key sitting in a config file.
  </Step>

  <Step title="You keep working">
    From then on it acts on your account, spending your credits and writing into your assets.
  </Step>
</Steps>

<Info>
  Nothing is granted until you approve in a signed-in browser. An app can start the request, but it can't complete it on your behalf.
</Info>

## What an authorized app can do

The same things you can, subject to your plan:

* Generate media and spend your credits
* Read and write your assets
* Read your credit balance and plan
* Run workflows you've saved

It is **your** account. There's no separate sandbox, and no separate balance.

## Before you approve

<Warning>
  Only approve apps you actually recognize. An authorized app can spend every credit you have. If an authorization page appears when you didn't just try to connect something, close it and don't approve.
</Warning>

Worth asking:

* **Did I start this?** An authorization page you didn't trigger is a red flag.
* **Do I trust it with credits?** Approval is account access, not a read-only peek.
* **Can I revoke it?** Yes — see below. Approval is reversible.

## Revoking access

Signing out of the granting session ends the app's access. If you're unsure what's connected or want a clean slate:

1. Change your password, which invalidates existing sessions.
2. Review your integration keys in **Integrations** and disable any you don't recognize.

<Tip>
  If you want per-integration control you can turn off individually, prefer an [API key](/integrations/api-keys) over plugin authorization. Keys are named, scoped, and independently disableable.
</Tip>

## Choosing between the two

|                     | Plugin authorization            | [API key](/integrations/api-keys) |
| ------------------- | ------------------------------- | --------------------------------- |
| Setup               | Approve in browser              | Create and paste a key            |
| Best for            | Tools built to connect to Pixio | Your own code and scripts         |
| Scoping             | Account access                  | Choose specific areas             |
| Revoke              | End the session                 | Disable that one key              |
| Good for CI/servers | No                              | Yes                               |