Account, credentials, and billing
Everything administrative lives under Settings in the app. Three of its surfaces matter operationally.
Connected sessions: who can drive your account
Section titled “Connected sessions: who can drive your account”Every cai connect authorization mints a revocable machine credential. Settings → Connected sessions lists them all — each machine that can operate your account through the CLI. Revoking one immediately cuts that machine off. Review this list the way you’d review SSH keys: after working on a borrowed machine, after an agent session you didn’t finish, periodically on principle.
cai auth status shows the current machine’s authorization; cai auth logout removes its local credential.
API keys
Section titled “API keys”API keys (prefixed sk-) authenticate the workflow API — server-to-server calls, not the CLI. Two facts the UI makes easy to miss:
- Keys are listed masked, but a key can be revealed and copied at any time — you are never locked out of a key you created.
- A key is account-scoped: treat it like a password, rotate by creating a new key and deleting the old.
Usage and billing
Section titled “Usage and billing”Usage meters in usage cents (100 = $1) against the organization’s shared pool — every run, dev and live, agent conversations included (cost model). Usage records break down spend by category: AI provider usage, integration usage, external APIs, action calls, execution costs. Workflow executions show per-run cost in run details.
Plan limits that surface as behavior rather than invoices:
- Run history retention — 7 days free, 90 days standard (why it matters when debugging).
- Workflow version history — unavailable on free, 90 days on standard plans (restore).
- Active workflow cap — publishing beyond it is refused.
Organization
Section titled “Organization”Members share the usage pool and receive organization-visible agents (sharing). Connections and workflows remain per-account; sharing an agent is the deliberate act that exposes capabilities to the team.
Example prompts
Section titled “Example prompts”Review my connected sessions and API keys: list them, flag anything I haven't used in two weeks, and walk me through revoking the stale ones.