Discover the intended scope
Confirm the intended Mind, owner/authorised operator and actual installed app. Read the live tool schema and current app configuration. The Portal Usage meter is recorded personal spend with a visual reference; unavailable is not zero and the meter is not an enforced cap.
Personal and installed model routes
Personal Portal route changes use Settings → Model connection → Change model / Change provider. Owner App model access separately grants named connected routes and an allowlist of models. Inspect the saved route/model choices after Save app access. No generic public get/set-model MCP name is invented.
For an authorised operator on the actual repository, these read-only owner CLI commands inspect route state and cap policy without printing secrets:
brain-gateway --repo <mind-repo> llm list
brain-gateway --repo <mind-repo> llm daily-cap status
brain-gateway --repo <mind-repo> llm token-cap show
brain-gateway --repo <mind-repo> llm shared-key-routes status
brain-gateway --repo <mind-repo> llm protect-window status
Use the actual supported operator environment and repository, not a customer path guessed from examples. Daily cost caps concern per-consumer KEY-route spending; borrowed-route daily token caps concern a consumer using a route it does not own and exclude box-shared routes. Subscription routes are zero-dollar-billed in this ledger; that does not establish unused provider subscription capacity.
App budget updates
The released act action app_set_budget takes item_id as app ID and config.max_input_tokens, max_output_tokens, plus max_cost_micro or max_cost_usd. These are rolling seven-day thresholds. Token and micro-USD values are non-negative integers. Use the owner-approved values; do not copy a tutorial budget into production.
Budget is checked before a call using recorded spend, not a reservation of every possible final token or charge. An allowed call may cross the threshold before later calls are blocked. Loop node, concurrency, case time and cost limits are additional scopes. See control-agent-autonomy.
app_clear_budget restores manifest caps, not unlimited authority by definition. Inspect the effective installed result after either action. If the client omits these actions, hand the app ID and approved scope to its authorised installer rather than inventing a direct endpoint.
Verify before resuming recurring work
Pause affected work when changing a provider/grant. Inspect current route/model access, budget and connection, then observe an authorised normal run and actual output. Report route configured, call succeeded and output saved as separate results. A lost lifecycle response requires original-state inspection before repetition.
Related
Practical guides for people and agents