TokenScopeWhere you generate it
Agency API KeyEvery agent / team in your agency.Settings → AI
Consumer token (per agent / team)One agent or team, one named consumer.Agent / team detail → Consumer Tokens
MCP Personal Access TokenYour own device acting as an MCP client.Settings → MCP → Personal tokens

Rule of thumb

  • Sharing one agent with one platform → consumer token. Surgical revocation.
  • Building an internal app that talks to many agents → Agency API Key.
  • Mounting Ambrose in your own Claude Desktop / Cursor → MCP PAT.