NebulaNebula
Getting Started

Agent scoping & access

Learn how agent visibility and connected apps work together in Nebula — private vs workspace agents, who owns connections, and what teammates can use.

You can control who gets to use an agent and whose connected apps it acts through — by setting the agent's visibility and knowing who owns its connections.

Every agent in Nebula is either private to you or shared with your whole workspace, and the apps an agent connects to are owned by whoever set them up. Understanding how those two ideas fit together is the key idea on this page.

Private vs workspace agents

An agent's visibility decides who can see and use it. You set it when you create an agent and can change it anytime.

PrivateWorkspace
Who can see itOnly youEveryone in the workspace
Who can use itOnly youAny workspace member
Best forPersonal tasks, drafts, experimentsShared team workers everyone relies on

Making an agent workspace-visible is how you share a teammate-ready agent. The moment you do, anyone in the workspace can chat with it and trigger it.

Your connections belong to you

When you connect an app — Gmail, Slack, GitHub, and so on — that connection is tied to your account, not to the workspace as a whole.

In Settings → Workspace → Integrations you only ever see the connections you set up. You won't see a teammate's connected accounts, and they won't see yours.

Connecting an app authorizes Nebula to act as you in that app. That's why connections stay personal — each person grants their own access.

What happens when you share an agent

Here's the part that surprises people: a workspace agent always runs with its owner's connections, no matter who starts it.

You build an agent, connect your Gmail to it, and set it to workspace visibility.
A teammate opens the agent and asks it to send an email.
The agent sends that email through your Gmail connection — because the connection belongs to you, the owner.

So sharing an agent shares the capability, and the work flows through the owner's connected accounts. Keep an agent private if you'd rather its access stay with you alone.

Two people, two Gmails

Because connections are personal, two teammates connecting the same app create two separate connections — and effectively two separate agents.

Not sure who owns what? Ask Nebula in chat — it can tell you an agent's visibility and which connections it uses. For anything unresolved, email support@nebula.gg. See Support for more options.

On this page