Skip to main content
ONE PLACE FOR EVERYTHING

​
Configure it once. Every agent picks it up.

Language, billing, encrypted credentials, headless runtime, and your assistant preferences: no hunting across menus. Change anything here, and every agent picks it up immediately.

Actionist, Settings
Settings
Agents
Apps
Billing
🌐
Language
English (US), 22 locales available
All users
💵
Billing
Pro plan · 5 seats · Active
Admin only
🔒
Credentials Vault
3 credentials · All active
Hidden in delegated
🖥️
Headless Runtime
Deploy to VPS · Running
Varies by plan
⚡
Help Assistant (Pip)
Calm mode on · Nudges off
All users
🖥️
Permissions Required
Screen Recording · Accessibility
macOS only
v2.4.1Check for Updates
The map

​
Seven sections, one scroll.

The Settings page is a single card-grid scroll. Select a section to see its key rows, access badges, and platform notes.

🌐
LanguageAll users
App language
Selects UI locale for the entire app
English (US)
22 locales available
Includes Arabic, Farsi, Urdu (RTL)
desktop + web
No save needed
Changes take effect the moment you select a locale
instant

The Language card is at the top of Settings. Pick any locale from the dropdown: the entire app UI, including Clerk sign-in components and RTL layout direction, switches in a single render cycle. No restart. Saved locally; survives backend outages.

💵
Billingadmin only
Plan
Current subscription tier
Pro
Status
Active, trialing, or past-due
Active
Renewal date
End of current billing period
Jul 11, 2026
Seats
Seats on the plan
5
Credit usage bar
Used + reserved vs ceiling this period
below the grid

Visible only to org admins (and delegated sessions with the billing_summary scope). Non-admin members see no Billing card at all. Two actions: Upgrade to Pro (opens Stripe portal, hidden when already on business plan) and View billing details (navigates to /settings/billing-new).

🔒
Credentials Vaulthidden in delegated sessions
Add credential
Display name, provider, kind, value
API key, Token, Header, OAuth
Test now
Validates against the provider where supported
pass
Rotate
Requires credential to be enabled first
all bindings auto-update
Delete
Gated · blocked until all consumers are unbound
unbind consumers first
Search credentials
Filter the vault by name, provider, or kind
sub-panel inside vault

Values are encrypted at rest and never shown after save. No reveal button, no clipboard copy. If a key is lost, rotate rather than recover. The Credentials Vault card is hidden entirely when a delegated session is active.

🖥️
Headless Runtimevaries by plan
Run Locally
Runtime on your machine · good for testing
Deploy to VPS
Always-on runtime over SSH · no server scripting
Telegram Bot Token
From @BotFather · the only required field for local mode
required
Clerk M2M secret
Never stored by Actionist · re-enter on every VPS deploy
not stored

This card is not present in every workspace. Where it is available it offers two modes. Run Locally keeps the runtime on your machine, which suits testing. Deploy to VPS deploys over SSH for always-on agents. After a successful VPS deploy three buttons appear: Check Status, Logs, and Stop.

⚡
Help Assistant (Pip)All users
Calm mode
Freezes idle animation, silences all contextual tips
Hide for an hour
Removes Pip for exactly 60 minutes · shows resumption time
timed
Proactive nudges
Off by default · fires only for concrete gaps
Tip catalog
Per-tip on/off toggle · disable a tip once, never see it again
fine-grained
Reset Pip’s position
Returns Pip to bottom-right corner
Reset

Four separate dials for Pip, from a full mute to a tip-by-tip opt-out. Calm mode keeps Pip visible but still and silent (good for long focused sessions). Hide for an hour removes Pip entirely for exactly 60 minutes (good for presentations). These two are distinct. Use whichever fits the moment.

🖥️
Permissions RequiredmacOS only
Screen Recording
Lets Actionist read on-screen state for Computer Use
Granted
Accessibility
Lets Actionist click, type, and navigate apps on your behalf
Not granted
Grant access
Opens macOS System Settings at the correct pane
opens System Settings

The Permissions Required card only appears on macOS, determined at runtime by the system platform. Not shown on Windows or Linux. Both Screen Recording and Accessibility are required for any agent using Computer Use. Grant them here if you skipped the first-run onboarding prompt.

↑
App Updatessticky footer
Current version
Shown in the sticky footer at the bottom of Settings
v2.4.1
Check for Updates
Shows Checking… while querying the update server
Up to date
Auto-reset
Both pass and fail states reset to idle after 5 seconds
5 s

The version footer is sticky at the bottom of the Settings page. Always visible as you scroll. Click Check for Updates to query the update server. If the check fails, an amber Update check failed message appears. Both states auto-reset after 5 seconds. Most failures are transient network blips; click again to retry.

Language

​
22 Instant switch.

Actionist ships with 22 locales out of the box, including three right-to-left languages. Pick one and the entire app UI changes immediately. No save button, no restart.

Select a locale to see the switch behavior
Locale saved locally. The entire app UI switches in one render cycle, no restart required. The setting survives app restarts and backend outages.RTL locale selected. The app layout direction flips to right-to-left immediately, including the sidebar and Clerk sign-in components. Saved locally, survives backend outages and restarts.
1

Open Settings

Click Settings in the sidebar. The Language card is at the top of the page.
2

Open the dropdown

Click the language dropdown. Each locale shows its country flag and name.
3

Pick a locale

Select any of the 22 supported locales. The entire app UI switches instantly, including Clerk sign-in components and layout direction for RTL languages.
The chosen language is saved locally and survives app restarts, even if the backend is unreachable.

Our Tokyo, Berlin, and Cairo teams all use the same workspace. One locale switch and Actionist is native for everyone: no separate instances, no config drift.

Omar · Agency owner, 22-locale team
Settings, Language
App language
English (US)
🇺🇸 English (US) en-US
🇬🇧 English (UK) en-GB
🇮🇳 Hindi hi
🇦🇪 Arabic arRTL
🇫🇷 French fr
🇪🇸 Spanish es
🇩🇪 German de
🇮🇷 Italian it
Billing

​
Billing at a glance.

The Billing card is only visible to org admins. Non-admin workspace members do not see it. Delegated sessions with the billing_summary scope can also view it.

The card gives a four-column summary of your subscription. Below the grid, a usage bar shows how much of your credit ceiling you have consumed and reserved so far this period.

Plan
Pro
Current subscription tier
Status
Active
Active, trialing, or inactive. A past-due banner shows the grace-period end date when payment is overdue.
Renewal date
Jul 11
End of current period
Seats
5
Seats on the plan
Credit usage this period
42% consumed + reserved

Upgrade to Pro

Opens the Stripe billing portal. Hidden when you are already on the business plan.

View billing details

Navigates to the full billing page at /settings/billing-new inside the app.
Credentials vault

​
One vault. Every secret.

API keys, bot tokens, and OAuth credentials live here. Encrypted at rest, never revealed after save, and automatically propagated to every bound agent when you rotate them.

Credential values are encrypted in the vault and never shown after save. There is no reveal button and no clipboard copy of secrets. If you lose a key, rotate it. Do not try to recover it from Actionist.

​
How a credential travels.

DeclareThe SKILL.md names a slot (env: STRIPE_SECRET_KEY) never the value.
Save to vaultReal key stored encrypted in Settings > Credentials Vault.
Bind per agentKey icon on the Skills tab maps slot to vault entry, one-time.
Resolve at runtimeSecret injected silently on every run. Rotate in the vault; every skill updates automatically.
🔒
Stripe API Key
provider: stripe · kind: api_key
Active
Used byResearch Agentsummarise.skill

​
Credential actions

Add a credential

1

Click Add credential

Find the Credentials Vault section and click Add credential.
2

Fill the form

Enter a Display name, a Provider identifier (e.g. github), a Kind, and the Value. Use the show/hide toggle while typing to confirm the value.Supported kinds: API key, Token, Header secret, Client credentials.
3

Click Save credential

The value is encrypted immediately. It is never retrievable after this point.
Find the credential card and click Test now. Actionist probes the provider:
  • Supported providers: validated against the real provider API.
  • All other providers: structural validation (format and length check).
A badge appears on the card: a green check for a passing test, an amber warning with a reason for a failure.
1

Confirm the credential is enabled

The Rotate button is blocked for disabled credentials. If the status shows Disabled, click Enable first. The tooltip reads: “Enable before rotating.”
2

Click Rotate

Paste the new secret value into the form that appears.
3

Confirm

Click to save the new value. All existing bindings (agents, skills, channels, MCP servers) pick up the new value automatically on their next call. No manual re-binding required.
Existing bindings keep working during and after rotation. They pick up the new value on next use.
Click Disable on a credential card to pause it without deleting it. Disabled credentials show an amber Disabled status badge. Bound consumers will fail until you re-enable.Click Enable to restore it. If you need to rotate a disabled credential, you must enable it first.
The Delete button is intentionally gated. It stays disabled as long as any consumer references the credential.
1

Remove all bindings

The card lists every consumer under “Used by”. Agents, model presets, skills, channels, MCP servers. Remove those references first. The tooltip reads: “Unbind consumers first.”
2

Verify usage is clear

If the Delete button shows “Refresh to verify usage before deleting”, click the vault Refresh button to re-check.
3

Click Delete and confirm

Once all bindings are removed, Delete becomes active. Confirm in the dialog to permanently remove the credential.

​
Credential status badges

Every credential card carries one of four statuses:

Active

The credential is valid and in use.

Invalid

The last validation attempt failed. Test it and rotate if the key has been revoked.

Disabled

Manually disabled. Consumers referencing this credential will fail until you re-enable it.

Needs re-auth

The OAuth flow that issued this credential requires re-authentication.
Re-authenticate support is not yet wired. The current workaround is to delete the credential and recreate it with a fresh token.

​
Paired runtimes

There is no Paired runtimes sub-panel inside the Credentials Vault. Machine identities are handled by the platform rather than surfaced as a screen you manage. If you were sent here to pair or revoke a runtime, that flow does not exist today.

1

Click Pair runtime

A fresh one-time pairing code is generated and displayed.
2

Paste the code into the runtime

Copy the code and paste it into the runtime process immediately.
The pairing code is shown exactly once. Once you close the dialog it is gone. Actionist does not store it. Treat it like a password.
3

Confirm the new identity appears

There is no Paired runtimes panel to confirm this in.

To revoke a runtime, click the revoke action on its entry. Revocation is immediate and permanent. A new pairing code is required to re-authorise.

The Credentials Vault is hidden entirely when a delegated session is active.
Headless runtime

​
Run agents when your laptop is closed.

Headless Runtime keeps scheduled agents firing and Telegram bots responding around the clock, either on your local machine for testing or deployed directly to a VPS from within the app.

Availability. The Headless Runtime card does not appear for every workspace. If you open Settings and there is no Headless Runtime section, this feature is not enabled on your build or plan, and nothing in this section applies to you. Contact support before assuming it is a bug.
👤
You
⇅
Mode
Run Locally / Deploy to VPS
💻
Local Runtime
your machine
💬
Telegram bot
🏢
VPS Runtime
your server
💬
Telegram bot
🔑
SSH deploy
no scripting
Settings, Headless Runtime
Run LocallyDeploy to VPS
Connection
Host
Port: 22
Username
SSH Private Key path
Browse
Authentication
Clerk M2M secret (ms_…)
Test ConnectionDeploy to VPS
Use this mode to run the agent runtime on your own machine. Good for testing before you have a VPS provisioned.
1

Select Run Locally

In the Headless Runtime card, select the Run Locally tab.
2

Enter your Telegram Bot Token

Paste the bot token from @BotFather. This is the only required field.
3

Optionally restrict to specific users

Enter a comma-separated list of Telegram User IDs in the Allowed User IDs field to prevent strangers from messaging your bot.
4

Click Start Runtime

The status badge transitions: Stopped > Starting… > Running. When running, the badge shows the Telegram logo and “Connected.”
5

Stop when done

Click Stop Runtime to halt the local process.
Help Assistant

​
Pip on your terms.

Pip is the always-on Actionist concierge. The Help Assistant section gives you four separate dials (from a full mute to a tip-by-tip opt-out) so Pip is as helpful or as quiet as you want.

Calm mode

Freezes Pip’s idle animation and suppresses all contextual tips. Pip remains visible but completely still. Good for long focused sessions.

Hide for an hour60 min

Removes Pip entirely for exactly 60 minutes. While active, the button label becomes Show Pip again and shows the resumption time. Good for presentations.

Proactive nudges

Off by default. When enabled, Pip surfaces concrete action items inline: an agent missing a model preset, an MCP server waiting for auth, pending marketplace updates. You can also opt in during onboarding.

Tip catalogfine-grained

Lists every registered tip with an individual on/off toggle. Disable a tip to prevent it from ever firing again. Re-enable at any time. Keep the tips you find useful, silence the ones you do not.

⚡
Help Assistant (Pip)All users
Calm mode
Freezes animation, silences tips
Hide for an hour
Removes Pip for 60 minutes
Hide Pip
Proactive nudges
Off by default
Tip: “Connect your first app”
Tip catalog entry
Tip: “Set a model preset”
Tip catalog entry
Tip: “Try the schedule editor”
Tip catalog entry
Reset Pip’s position
Returns Pip to bottom-right corner
Reset

​
Resetting Pip’s position

If you have dragged Pip to an inconvenient location, click Reset under “Reset Pip’s position.” Pip returns to the default bottom-right corner of the screen.

Permissions

​
macOS permissions.

The Permissions Required card only appears on macOS. It is not shown on Windows or Linux. The gate is determined by the system platform at runtime.

Actionist needs two macOS permissions to observe your screen and control UI elements for Computer Use. Without both, agents that rely on screen automation cannot run.

Screen Recording macOS only

Allows Actionist to see your screen. Required for any agent that uses Computer Use to read on-screen state.

Accessibility macOS only

Allows Actionist to control UI elements. Required for any agent that clicks, types, or navigates apps on your behalf.

1

Click Grant access

For each permission not yet granted, click the Grant access button on its row.
2

Approve in System Settings

macOS System Settings opens at the correct pane. Toggle the permission on for Actionist.
3

Return to Actionist

Switch back to the app. The permission row updates to reflect the granted status.
These permissions are also requested during first-run onboarding. If you skipped them then, grant them here any time. Agents will start using Computer Use the next time they run.
App updates

​
Checking for updates.

A sticky footer at the bottom of the Settings page shows the current app version and a Check for Updates button.

⟳
Checking…
Querying the update server
✓
You’re up to date
Green check. No update available
⚠
Update check failed
Amber, usually a transient network blip
1

Click Check for Updates

The button shows Checking… with a spinner while the update server is queried.
2

Read the result

You’re up to date: a green checkmark confirms no update is available.
If the check fails, an amber Update check failed message appears instead.
3

Retry if needed

Both states auto-reset to idle after 5 seconds. Click the button again to retry.
Best practices

​
Getting the most out of Settings.

Use Test now to confirm the current key is still valid before rotating. If it is already broken, rotating wastes a round-trip of updating every dependent agent. You will know immediately that a fresh key is needed.
The Delete button stays disabled as long as any consumer (agent, model preset, skill, channel, MCP server) references the credential. Read the tooltip: it tells you exactly what is blocking deletion (“Unbind consumers first”). This prevents silent breakage across your workforce.
The chosen locale is saved locally on your device, not to the backend. It survives app restarts and backend outages. There is no separate save step. The change takes effect the moment you select a locale.
The Clerk M2M machine secret (ms_…) is never stored by Actionist. By design. You re-enter it on every deploy. Store it in a password manager alongside your other deployment secrets.
These two controls are distinct. Calm mode keeps Pip visible but freezes the animation and silences tips. Good for long focused sessions. Hide for an hour removes Pip entirely for exactly 60 minutes. Good for presentations or calls where you do not want the character visible.
If one specific tip fires too often but others are useful, disable only that one in the Tip catalog. It will never fire again unless you re-enable it. You do not have to choose between all tips or no tips.
Nudges are off until you opt in. When enabled, they fire only when Pip detects a concrete gap: an agent without a model preset, an MCP server waiting for auth, or pending marketplace updates. They are not marketing prompts.
If Check for Updates returns “Update check failed,” the button auto-resets after 5 seconds. Click it again. Most failures are network blips.
Configure once

​
Your agents handle the rest.

Add your credentials, set your language, deploy the runtime, then let Actionist run.

Open the DashboardEmail the team

Credentials encrypted at rest, never revealed after save.
Language saved locally · Vault-backed secrets · Per-agent scoping · Nothing leaves your workspace.

Keep going

​
Next steps.

Credentials

Deep-dive into the vault: how credentials are bound, rotated, and scoped to individual agents.

Cloud runtime

Learn how Headless Runtime keeps agents firing when your laptop is closed.

Billing

Understand plans, seats, usage, and the Stripe portal.

Agents

Manage the agents that consume the credentials and runtimes you configure here.

Apps

Install integrations, credentials are often auto-saved when you connect an app.

Getting started

macOS permissions are also covered in the first-run onboarding guide.