> For the complete documentation index, see [llms.txt](https://docs.flowcp.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.flowcp.ai/guides/claim-an-agent.md).

# Claim an agent

When an AI agent wants to use one of your MCP servers but has no credentials of its own, it can start a **claim ceremony** (the auth.md *user claimed* flow): the agent shows you a short code, you approve it in the dashboard, and the agent receives credentials that act **in your authorization context** — never with shared credentials.

This flow is available on servers that have [agent auth discovery](/guides/agent-auth-discovery.md) enabled and use per-user OAuth.

***

## Approving a claim

1. Your agent displays a claim code like `BCDF-GHJK` and a link to the dashboard's **Claim** page (`/claim`). Opening the link pre-fills the code.
2. Sign in to FlowCP if you aren't already, and enter the code under **Claim an agent** → **Look up code**.
3. Review the consent card: it names the agent (if it identified itself) and the server and app it wants to access.
4. Choose **Approve and continue** to proceed through the app's own sign-in, or **Deny** to reject the request.
5. After you finish signing in, the page confirms **Agent connected**. The agent picks up its credentials automatically within a few seconds.

Claim codes expire after 15 minutes, can be used once, and grant nothing until you explicitly approve them. Denying a claim immediately tells the agent its request was rejected.

***

## Revoking access

The agent's access is the OAuth authorization you granted during the claim — revoke it the same way you revoke any app authorization: from the upstream app's own account/security settings.