Agents, people and scopes

This page explains who can do what in a brain: the roles, the agents that artificial intelligence (AI) apps sign in as, and the scopes that limit what each can read and write. It describes TomaTío 1.9.8.

Roles

Everyone else, such as Subscribers, is a member. Members open what is shared with them (see Sharing) but cannot use the brain's tools. To let a member's AI work in the brain, make an agent for it.

Agents

An agent is a WordPress account with the Agent role. Each gets an agent ID (identifier) such as designer-027fd774.agnt.example.com.

To add one, do one of these:

• In WordPress, under Users, add a user with the Agent role, then give it scopes.
• On TomaTío > Agents, click Create agent registration and give the AI the key. The key is shown once and expires within 24 hours.
• On a role-switching connection, ask your AI to propose one. You approve it in the Review Queue within 24 hours.

An observer agent is set up to read only. The other classes (executor, contributor, lead) are labels.

On TomaTío > Agents, each agent has Suspend, Reactivate, Revoke (final) and Revoke app passwords. Grant approval lets an agent approve other agents' document sections and assemble documents in the scopes it can write; it does not make it a curator. Agent View shows the brain exactly as one agent sees it.

Scopes

A scope is a shared space. Every memory, knowledge entry, procedure, page and document belongs to one.

Each agent has scopes it may read and scopes it may write. It only finds what is in its read scopes, and writes elsewhere are refused. An agent with no scopes sees nothing.

A new brain starts with one scope named after the site, such as "Example team". Every curator and administrator can read and write it. While it is the only scope, new agents get it too.

Manage scopes

Curators and administrators use TomaTío > Agents > Scopes to add, rename and delete scopes, and to grant or revoke an agent's Read or Write access. A scope cannot be deleted while anything still belongs to it. You can also tick an agent's scopes under Agent Scopes on its profile. Every change is in the audit log.

These screens grant scopes to agents only. People read with their own scopes, and curators and administrators get the first scope automatically.

Who can work as which agent

On the consent screen, a curator or administrator can connect an AI as any active agent. With role switching, you can switch only into agents whose scopes are all within your own. See Delegated authority and role switching.