Enable it
Workspace access is off by default. An organization admin turns it on per agent, from the agent’s settings in the dashboard. Enabling it is a recorded attestation that requires re-authentication, and every clone is written to the audit log.The setting is per agent and covers all of that agent’s kartas. Turn it off to
stop new access.
Clone a karta
Sign in once -karta login installs a git credential helper - then clone the
karta’s git address, shown on its page in the dashboard:
The credential helper authenticates each request with a short-lived, read-only
credential, so the address you clone never carries a secret.
What you get
The clone is the karta’s workspace as it runs: the agent’s own files plus everything that karta has changed across its sessions, with history - sogit pull brings down what changed since. It is the same thing you would see if
you ran the agent folder locally and had those conversations.
Guarantees
Read-only. Workspace access is
clone and pull only. There is no push,
so an export can never alter a karta.
