Skip to content

Register an external agent

What it does

An external agent runs somewhere else: Claude Code, Cursor, Microsoft Copilot, Copilot Studio or your own program. Registering it gives it a name, a purpose and a token, so that its access to your connectors is governed like that of any other agent: it sees only the connectors you chose, and every call is recorded with the purpose.

The agent does not run on the gateway. It has no model and no instructions here. It acts for the person who registers it, with that person's permissions.

How to ask

You do not ask in a chat message here. You use a wizard on the Agents page.

  • Open Agents, choose the External agents tab and click Register external agent.
  • Step 1: enter a name, choose the platform and write the purpose in one line. The purpose appears in every record entry of this agent.
  • Step 2: choose at least one connector. Only Register creates the agent.
  • Step 3: copy the token and the endpoint, follow the setup guide for your platform, tick that you saved the token and click Done.

Tips

  • Write the purpose so that someone reading the record understands why the agent called a tool.
  • Copy the token before anything else. It is visible only now and never shown again.
  • Choose only the connectors the agent really needs. You can limit the tools per connector afterwards.

  • If you are unsure how to enter the values in your platform, switch the setup guide to the platform you use.

  • To let people connect by signing in instead of pasting a token, open the agent and use Sign-in via OAuth to link the client ID the person gives you. A dcr_ ID asks for a confirmation first.

Limits

  • The button is locked until a connector is connected, and while the selected access allows calls without a token or cannot take calls yet.
  • The platform and the hosting cannot be changed afterwards. An internal agent cannot become external, and the reverse.
  • An external agent cannot be invoked, scheduled or triggered on the gateway.
  • While you view as another person, no token can be created.
  • The system agent "Nicht verifizierte Clients" (unverified clients) opens as a read-only page without tokens; every write it attempts is held for approval.

When something goes wrong

  • Registering failed: nothing was created. Try again.
  • The agent was created but the token was not: click Create token in the wizard. If the token is refused, the agent exists without a token: once the cause is fixed, open the agent and choose Rotate (or Create new token when it has none).
  • Your department may not use this access: the agent exists; ask an administrator to allow it.
  • You closed the wizard without saving the token: open the agent in the External agents tab and choose Rotate (or Create new token when it has none). The old token stops working and a new one is shown once.
  • Revoke or Rotate failed: with a server or network error the action may not have taken effect: check the token list, then use Try again. If the server refuses (for example, your role may not change this agent, or agents are switched off for your workspace, in which case nothing was revoked), the page says so and offers no retry: ask an administrator. If the agent no longer exists, the page shows that instead.
  • Linking an OAuth client failed: the message next to the field says why (invalid ID, ID already linked to another external agent, unknown dcr_ ID, check not possible right now). Your entry stays; fix it or try again.
  • Copying did not work: select the text and copy it yourself.