API tokens
Management → API tokens (owner only). The token is the agent’s access to POST /api/v1/sync/, not the browser JWT.

Create
- Create token, name e.g.
prod-agent. - The
wgf_…value is shown once. After that the table only shows a mask. - Put it in agent YAML as
tenant_token— Connect.
Connect agent copies tenant_id, api_url, and a config hint.
One token can back several agents. Revoke disables every related sync; you cannot restore the row — issue a new token.
Deleting the agent row in inventory is not enough to stop collection: the next heartbeat registers it again. To stop sync, revoke the token.
The plan and resource / member limits live under Management → Subscription.