Agents authenticate with a workspace agent key, sent as Authorization: Bearer smv_….
Agent keys
- Created by workspace admins in Workspace settings → Agent access.
- A key belongs to one workspace and acts as the member who created it. If that member loses access, the key stops working.
- The key is shown once. Semavora stores only a fingerprint of it.
- Keys expire after 30, 90 (default) or 365 days and can be revoked at any time; revocation is immediate.
- At most 10 active keys per workspace.
Access levels
- Read only: websites, audits, priorities, fix tasks, business facts and verification results.
- Read and run: also starts audits and fix checks. Only works when the key's creator is an admin or editor.
Agents never get billing, team or website-verification access.
Limits
- Agents share the workspace's plan and fair use: one manual audit per website per 24 hours, plus the weekly audit; trials include 2 audits and 5 fix checks.
- Audits and fix checks started by an agent appear in the portal as requested via the key's name.
- The MCP server allows bursts of 20 requests and 10 requests per second.
ChatGPT app and Codex
Codex connects now using a workspace agent key. The ChatGPT app integration will use sign-in with your Semavora account (OAuth) instead, in a later release.