Access Bundles
An access bundle gives an assistant you already use, Instinct or Grok, a safe set of your agent's tools, skills and memory. The assistant does the thinking. Sprout decides what it can reach, and every action runs through Willow's gateway as you.
| Assistant | What it gets |
|---|---|
| Instinct | A private link to a page of plain web forms, one per tool, opened with a password. |
| Grok Bot | A private remote MCP server. Grok connects when you sign in to Sprout and allow it. |
To make an agent an access bundle, choose Instinct or Grok Bot when you build it, or move it under Settings > General > Where it runs.
What keeps it safe
- A password opens Instinct's bundle. Grok has no password: it connects with OAuth, when you sign in to Sprout and allow it. Either way, access expires after the time you choose.
- Sessions add a second step. Tools set to Require Session only run in a session you approved. The assistant sends you a short link; you open it signed in to Sprout and tap Approve session. A session lasts the time you choose, and using it doesn't make it last longer.
- Approvals: tools set to Ask Each Time wait for you to approve each call in Sprout, the same way. See Approve tool calls.
- Lockout: after a couple of wrong passwords or codes, each new try waits longer, up to 15 minutes.
The assistant can't:
- Use tools that are switched off, or any other app in your account.
- Approve its own requests. Only you can, signed in to Sprout.
- Change the agent, its tools or its settings.
How each tool runs
On the Connectors tab, every tool has one of three settings:
| Setting | What the assistant needs |
|---|---|
| Use freely | The password alone (Grok: being connected). Best for tools that only read. |
| Require Session | A session you approved. |
| Ask Each Time | Your approval for every call. |
By default, tools that change data ask each time and every other tool needs a session. Memory tools need a session too, unless you set them to ask.
Give access
On the agent's Overview tab, follow Connect Instinct or Connect Grok Bot:
- Create the access. Click Create access. For Instinct, Sprout makes a link and a password, and shows the password only this once. It's copied to your clipboard. Save it, then click I saved it. For Grok, Sprout makes a server URL; there's no password.
- Give it to the assistant. See Instinct or Grok Bot.
- Approve when it asks: when the assistant needs a session or asks about a tool call, it sends you a short link. Open it signed in to Sprout and tap Approve. Click Get notified on your phone to get requests as notifications too. See Approve from your phone.
If you'd rather give the assistant a code than open a link, you can also set up authenticator codes.
Under What Instinct can use or What Grok Bot can use, the overview lists exactly which tools, memory and skills the assistant gets, grouped by how they run. Click Change to edit them on the Connectors tab.
Check on access
The overview shows whether the assistant has access and until when, when it last signed in, and whether a session is unlocked.
- New password (Instinct): the old one stops working at once, and the assistant is disconnected until it has the new one.
- Sign Grok out (Grok): ends every Grok connection at once. Grok connects again when you allow it in Sprout.
- Stop access: signs the assistant out at once and ends any session. The link, logs and requests stay. Click Give access again to restore it.
The Logs tab lists every sign-in, session and tool call, with the IP address and client. See Logs.
Manage access
Open the agent's Settings, then Access.
- Password expires after (Grok: Access expires after): 1 day, 7 days, 30 days (default), 90 days or Never, counted from when the password was set or access was given.
- A session lasts: 5, 15 or 30 minutes (default), 1 hour or 4 hours.
- Password (Instinct): Make a new password, or Use my own (12 to 128 characters). Changing it disconnects the assistant until it has the new one. Sprout emails you when the password changes.
- Sign Grok out (Grok): ends every Grok connection. Grok connects again when you allow it.
- Link or Server URL: New link or New URL stops the old one at once. Instinct keeps its password; Grok has to be added again with the new URL.
- Remove access: deletes the link, password, logs and requests. To only pause access, use Stop access on the overview instead.
Keeping the password or access at 30 days or less and sessions at 30 minutes or less keeps the safety score up. See Safety score.