Account & security

This section is everything about your account: how to sign in, confirm your email, recover access, and how your data is stored.

Sign-up and sign-in

• Email and password — the basic method. After sign-up, a confirmation link is emailed to you.
• Social login — on agenthere.ru you can sign in with Google and Yandex; on agenthere.online with Google. Social login uses OAuth; the platform never sees the password.

Email verification

After sign-up, an email with a link arrives. Until the email is confirmed, some features may be limited. If the email didn't arrive — request another from the sign-in page.

Password recovery

Forgot your password — on the sign-in page pick "Reset". An email with a reset link arrives; follow it to set a new password.

How data is stored

• Passwords are stored hashed, never in plain text.
• Sessions are JWTs in http-only cookies; the access token is short-lived, the refresh token rotates.
• Personal data is stored on servers in Russia; payments issue a 54-FZ fiscal receipt.

API keys

API keys (ah_...) are separate credentials for programmatic access:

• created in the developer dashboard;
• stored only as a SHA-256 hash — they can't be shown again;
• come in two types: proxy (chat, models, MCP) and config (config and image upload);
• revocable with one button; status and last-used time are shown in the list.

More in Developer API.

Account security

• Don't share API keys or passwords with third parties, and don't commit them to a repo.
• Use a separate proxy key per client — easier to revoke.
• If you suspect compromise — change the password and revoke the keys.

Account deletion

For account and data deletion, contact support — the request is handled in line with Russian data-protection requirements.