Settings is a modal, not a page. Open the account menu in the app and choose Settings; it opens over whatever you were doing and closes back to it.

​
What is in there

SectionWhat you set
GeneralAppearance and chat preferences
SubscriptionYour plan and monthly usage — see Plans & billing
API keysCreate, copy and delete keys
NotificationsWhat you get told about, and how
KeyboardThe shortcut reference
SecurityPassword and two-factor authentication

​
Notifications

Turn on browser notifications to get a ping when something long finishes — a site build, a batch of calls. Send yourself a test from the same panel to confirm your browser allowed it. They are about work you started, not alerts you have to manage.

​
Two-factor authentication and your password

Both live at agentmore.app/app/security.
1

Start setup

On the Security page, choose to enable two-factor authentication.
2

Scan the code

Use any authenticator app — 1Password, Google Authenticator, Authy.
3

Confirm and save your backup codes

Enter the six-digit code to turn it on, then save the backup codes somewhere safe. They are shown once, and they are how you get back in if you lose the phone.
The same page changes your password. If you signed in with Google, the Google account is the login and there is no password to manage.

​
API key hygiene

A key is how a run is attributed to you and charged to your wallet, so it is the one credential worth being careful with.
  • Name each key after the machine or agent it lives on, so you know which one to revoke.
  • Keep it in your agent’s config, never in a repo, a ticket or a chat message.
  • Rotate by creating the new key and pasting it in first, then deleting the old one.
  • Revoke anything you cannot account for. It stops working immediately.
A key reaches the tool catalog and your own runs and nothing else — it cannot sign in, read your chats or files, change your plan, or raise your caps. So the worst a leaked key can do is spend, bounded by your spend caps. Full detail: API keys.