Settings map
Where each setting lives, and who can change it. Everything is on the Cloud Tag settings site; sign in with Google.
Organization page (/orgs/<id>)
Owners and Admins, except where noted.
| Setting | Notes |
|---|---|
| 1. Anthropic API key | Every agent runs on it, in your Anthropic account |
| 2. Agents | Link Gmail mailboxes. Per agent: @name, model, effort, instructions in every group, shared notes, Unlink, and Release address for an unlinked agent (Owners) |
| Defaults for every group | Organization name, organization-wide instructions, default model and effort |
| Spend limits | Monthly limit for the organization; default monthly limit per group |
| Fast mode | Allow !fast. Owners only |
| Owners and Admins | Add and remove people. Owners only |
| Optional: faster turns (Anthropic webhooks) | Signing secret for faster turns |
| Auto-approve rules | Plain-language rules that approve tool calls in every group |
| Connectors (with GitHub repositories), Skills, Secrets tabs | On for every group in the organization |
| Bundles tab | Instructions, connectors, repositories, skills and secrets for the groups a bundle applies to |
Group pages (/groups/<id>)
Shared Group pages require a current organization Owner/Admin role or a Group-admin grant. Posting to the Group does not grant web access.
| Tab | Settings |
|---|---|
| Overview | Custom instructions, when to reply, model, effort, shared-notes saving, mute |
| Connectors | The group's MCP connectors, their sign-in, permissions and per-tool overrides; its GitHub repositories |
| Skills | Built-in document skills; custom skills |
| Network & secrets | Network mode and allowed hosts; the group's secrets; recent network activity. Admins only |
| Files | Every group file; upload reference files |
| History | Every thread; import an mbox of past mail |
| Memory | View, edit and delete the group's memory notes |
| Approvals | Approve or decline tool calls waiting for an admin; the group's auto-approve rules |
| Routines | Scheduled prompts |
| Admins | Add and remove group admins; allow people outside the member list to ask the agent |
| Usage & activity | This month's spend and the group's own limit, recent turns, activity log |
Your connectors (/me/connectors)
Anyone signed in. Connect your own accounts and choose which organizations' agents may use them for your requests. See Personal connectors.
In the group
| Command | Who |
|---|---|
!help, !configure, !status, !mute, !unmute, !restart, !fast, !feedback, !routines, !fork, connect |
Anyone who can post to the group |
See Commands.
In Google Groups
| Setting | Where |
|---|---|
| Adding the agent to a group | Members → Add members, with Directly add members on |
| The agent's delivery | Each email |
| Who can post, and so who can ask the agent | The group's posting permissions |
| Removing the agent | The group's members |
In Google Workspace
| Setting | Where |
|---|---|
| DKIM signing, so the agent believes your groups' mail | Admin console → Apps → Google Workspace → Gmail → Authenticate email |
In the Anthropic Console
| Setting | Where |
|---|---|
| Webhooks for faster turns | Manage → Webhooks |
| Sessions, agents, billing | Your organization's console |
Which setting wins
- Instructions add up: organization, then agent, then each bundle, then group.
- Model and effort: the group's, else the agent's, else the organization's, else the platform default.
- Connectors, repositories, skills, secrets: the group gets the organization's, its bundles' and its own. For the same server or repository, the narrowest wins; a secret's name can be set only once per group.
- Spend: a group stops at its own limit (or the organization's default per group), and every group stops at the organization's limit.