← All tutorialsSECURITY AND CONTROL

How to revoke access to your AI agents

In the PeerBand dashboard, Disconnect a client under Connected apps, Remove a person under People with access, or Revoke machine to cut the machine off entirely. Each stops a different thing, and signing out or peerband logout revokes nothing on the server.

Pick what to cut off

  • An MCP client (a ChatGPT or Claude connection): dashboard, Connected apps, Disconnect. That client loses access to all your machines. Your machines stay connected.
  • A personal MCP token: dashboard, Revoke all MCP tokens.
  • A person you shared with: dashboard, People with access, Remove, or peerband share revoke acc_…. Cancel an unused invite with peerband share revoke inv_….
  • A whole machine: open the machine in the dashboard and choose Revoke machine. It disconnects the machine and removes its shares. To use it again, run peerband login on it.

What doesn't revoke

  • Signing out of the website doesn't revoke a client's grant.
  • peerband logout only deletes the credential on that machine. The machine stays listed until you revoke it in the dashboard.
  • Disconnecting a client doesn't revoke a machine, and revoking a machine doesn't disconnect your clients from your other machines.

Suspect a leak?

  1. Revoke the machine, and disconnect any client you don't recognise.
  2. Remove guests you no longer need, and check Guest activity (last 30 days) for anything unexpected.
  3. Rotate webhook secrets in Webhooks. The old secret keeps signing for 24 hours so receivers can switch over.
  4. Pair the machine again with peerband login.

Questions

Can a guest remove themselves?

Yes. In their dashboard, they can remove a shared machine from their account.

Does revoking a machine delete anything on it?

No. Your agents and Herdr keep running. The connector just can't reach PeerBand any more.

Open dashboard Read the docs