Managing Subagent Access
Subagents are workspace-scoped, but inside a workspace different people get different levels of access. This guide covers who can do what, how to share an agent with teammates, and how to use stars to keep your most-used agents within reach.
Permission levels
| Level | What it allows |
|---|---|
| View | See the agent in the list, open it in chat, and run it with its existing tools. |
| Edit | Everything View allows, plus edit the agent's label, description, prompt, tools, projects, model, schedule, and channel mappings. |
| Admin | Everything Edit allows, plus delete the agent and manage who else has access to it. |
The agent's creator gets Admin automatically. Workspace admins always have Admin on every agent in the workspace.
Sharing an agent with teammates
Subagents inherit your workspace's permissions system. To grant access to another person:
- Go to Workspace > Permissions.
- Find the user or group you want to grant access to.
- Add the subagent as a resource and choose the role (view, edit, or admin).
Once granted, the agent appears on that person's Subagents page and they can use it according to their role.
If you want a teammate to be able to schedule, edit, or rename the agent, give them Edit. If you only want them to be able to use it as-is, View is enough.
Starring an agent
Stars are personal bookmarks — only you see them, and they do not affect anyone else's view.
To star an agent, click the outline star icon on its card. The icon turns amber and the agent appears in the Agent Favorites section at the top of your subagents page.
To unstar, click the filled star (either on the card in the main list or in the favorites section).
Use stars for the agents you delegate to or chat with daily. The favorites section is right at the top of the page, so they are one click away.
Stars are workspace-scoped — if you switch workspaces, you only see stars for agents in your current workspace.
Updating the tool whitelist
A subagent's tools are the single biggest lever on what it can actually do. You can change the whitelist at any time from the agent's edit page — add tools when the agent's scope grows, remove tools when it should stop being able to do something.
- Changes apply on the agent's next invocation. Scheduled runs, delegations, and channel-routed calls all pick up the new whitelist immediately; there is nothing to redeploy.
- If a tool the agent relied on is removed (or deprecated in the toolbox), the agent will tell you on its next run that it can no longer do that thing. Fix by replacing the tool or updating the agent's prompt.
- Credentials and network permissions live on the tool, not on the agent. You do not need to reconfigure anything on the subagent when a tool's credentials change — the tool inherits the update automatically.
See adding tools to a subagent for the full walkthrough, and building a shared toolbox for your organization for the broader governance pattern.
Renaming, editing, deleting
- Rename or edit — open the agent's edit page (pencil icon on the card). All fields are editable. Changes apply immediately to scheduled runs and channel mappings.
- Delete — click the trash icon on the agent's card. You will be asked to confirm. Deletion is permanent and cascades to all the agent's data: tool whitelist, project links, channel mappings, scheduled triggers, stars, and any per-agent filesystem volume.
- Sandcastle-linked agents cannot be deleted directly. If the agent is linked to a sandcastle, remove the sandcastle link first or delete the sandcastle. This protects you from accidentally orphaning an app's operator.
Tips
- Keep descriptions sharp. The description is what other agents read when deciding whether to delegate. A vague description is the easiest way to make a useful agent invisible.
- Audit periodically. Workspaces accumulate agents. Once a quarter, scan the list and delete anything no longer in use. Because triggers and channel mappings live on the agent, deleting it cleans those up too.
- Use stars over folders. There is no folder system. Stars cover the "I use this every day" case; for everything else, search.