Client access, handled end to end

Operate As gets each client's access to their tools from a single link, keeps it alive, and lets your agents, workflows and code use it, without the client's secrets ever leaving our server.

01 / 06 · Scoped keys, over MCP

Agent access

Give each AI agent its own API key, limited to the clients, services and actions it needs. Every ready-made action is also an MCP tool, so Claude, Cursor, OpenAI's models and agent frameworks can call it directly. The agent only ever holds the key, never the client's token.

One key per agent or workflow, each scoped and revocable
An MCP server on the same API, plus a direct HTTPS API
Every call logged, rate limited, and shown to the client

Booking agent

key oa_••••7fk2scope Miller Dental · Sheets, Calendar, Slack

▸list_clients()✓ 1 client
▸sheets.read_rows("Bookings")✓ 48 rows
▸calendar.create_event(…)✓ created
▸slack.send_message(#front-desk)✓ sent
▸DELETE hubspot /crm/v3/objects/contacts/…✕ outside this key's limits

Over MCP or HTTPS · the agent never sees the client's token

02 / 06 · Permissions set up in a minute

One link, one button per service

Add a client, select the services you need, and copy the link. The client presses Connect and signs in on each service's own screen, or pastes a key with step-by-step help. Nobody shares a password, books a call or sets up a developer app.

Pick any of 4,000+ services for each client
No account for the client, no developer app for you
The same link reconnects anything that expires

03 / 06 · What clients agree to, clearly

Limits in plain words

Every permission comes with a sentence a client can understand, like “Read and edit your spreadsheets”. Clients see what you can do before they click, which is what makes them willing to.

A plain sentence for each permission
Only the permissions each service needs
The client can check them again at any time

What Brightloop can do2 connected

Google SheetsUsed 2 minutes ago

Remove

Read, add and edit rows in your spreadsheets

Google CalendarUsed yesterday

Remove

See, add and change events on your calendars
See the names of your calendars

Google's permission names, in plain words

04 / 06 · MCP, API, SDKs or n8n

Use it however you build

Call a client's tools from an AI agent over MCP, with curl, from the Python, TypeScript and Go libraries, or with the Operate As node in n8n. Pick a client, a service and an action. Our server attaches the client's access, so the secret never sits in your code or your workflow.

Ready-made actions for popular services, plus pass-through to any endpoint
One key works across MCP, the HTTPS API, the libraries and n8n
Works with n8n's HTTP Request node on n8n Cloud too

Use it however you buildPreview

claude mcp add --transport http operate-as \
  https://api.operate.as/v1/mcp \
  --header "Authorization: Bearer oa_..."

# Then ask: "Read Miller Dental's bookings sheet"

One key · every client · any stack

Operate Asn8n step

Client: Miller Dental
Service: Google Sheets
Action: Add row
Spreadsheet: New patient bookings

Access attached on our server · 200 OK · row added

05 / 06 · Automations keep running for months

Access that stays alive

Access is stored encrypted and renewed before it runs out, both at the moment a workflow uses it and in a daily check. If a client's access really ends, you hear about it before your automation fails.

Encryption keys held in a secrets manager, not the database
Renewed at the moment of use, plus a daily check
Expired connections email you and the client

Access logLast 24 hours

Miller Dental · Google SheetsRenewed

Google access lasts about an hourRenewed before it runs out

03:00Daily check: 41 connections healthy
03:00Daily check: Crumb & Co Bakery's Google access was removed
03:01Reconnect link emailed to you and the client
09:14Google Sheets renewed before a workflow call
09:14Add row sent to Google Sheets for Miller Dental

06 / 06 · Know when you can start

Status board and alerts

One board shows every client, each connection's state and when it was last used. You get an email the moment a client finishes, and you or your client can end access at any time.

An email when a client has connected everything
Last used shown for every connection
Ending access cancels it at once and deletes the stored credential

Get started

Send your next client one link

Add a client, select the services, copy the link. You'll get an email the moment their access is ready. Start free, no card required. Paid plans are one flat monthly price, and a busy month never takes your agents offline.

Prefer email? hello@operate.as