Installing a shared agent connects it to your own services — not the agent author's. You approve exactly what the agent can access, and you can revoke it at any time.

Finding agents

Shared agents are distributed by their authors as install URLs:

https://gazebohq.com/install/<agent-slug>

You might receive this link from:

• A colleague sharing a tool they've built
• A README or documentation page
• An agent marketplace or directory listing

The install flow

1. Click the install link — you land on the consent screen showing what the agent is requesting
2. Review the declared scope — every service and action the agent says it needs is shown explicitly
3. Sign in or sign up if you don't have a Gazebo account — required to create the access profile
4. Click Approve to grant the full declared scope, or Decline to exit without granting anything
5. Copy the bearer token shown on the confirmation screen — it is displayed once only

The agent now has a bearer token to retrieve credentials from your vault — within the scope you approved.

What gets created

After approval, you'll find in your Gazebo dashboard:

• A new agent named after the installed agent (e.g. Stripe Payment Monitor (installed))
• The bearer token you copied — configure it in the agent's environment as GAZEBO_TOKEN
• All credential accesses logged in your Logs page

Prerequisites

Before approving, ensure the services the agent requests are connected in your Gazebo vault. If you approve Stripe access but haven't connected Stripe, the agent's get_credential calls for Stripe will return not_found until you connect it.

Revoking access

To revoke at any time:

1. Go to Agents in your dashboard
2. Find the installed agent
3. Click the delete icon and confirm

The bearer token is immediately invalidated. The agent cannot retrieve further credentials. No notification goes to the agent author.