For Agents
Manage Prefect Cloud accounts, workspaces, teams, service account bots, and access control for workflow orchestration environments.
Install Jentic One Beta
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Prefect Cloud API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | shStep 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with Prefect Cloud API.
Retrieve current actor profile and associated accounts and workspaces
Manage account settings including billing and organizational preferences
Create and configure teams with membership and workspace role assignments
GET STARTED
Use for: I need to create a service account bot for my Prefect workspace, I want to invite a team member to our Prefect Cloud account, List all workspaces associated with my account, Get the current user profile and permissions
Not supported: Does not handle flow definitions, task execution, or pipeline scheduling -- use for Prefect Cloud platform administration only.
The Prefect Cloud API manages workflow orchestration platform resources including accounts, workspaces, teams, memberships, service account bots, invitations, and workspace-level access control. It provides 52 endpoints for administering the Prefect Cloud environment where data pipelines and workflow deployments run, with bearer token authentication and organization-scoped resource management.
Provision service account bots for automated pipeline authentication
Invite users to accounts with configurable workspace access roles
Control workspace-level permissions through role-based access scoping
Manage API keys and sessions for programmatic platform access
Patterns agents use Prefect Cloud API for, with concrete tasks.
★ Service Account Provisioning for Pipelines
Create and manage service account bots that authenticate automated data pipelines against Prefect Cloud. Bots receive scoped API keys that allow pipeline agents to register flow runs, report status, and interact with the orchestration platform without using personal credentials.
Create a new service account bot via POST /api/accounts/{account_id}/bots/ with a descriptive name, then retrieve its API key for use in pipeline configuration
Team and Access Control Management
Organize Prefect Cloud users into teams and assign workspace-level roles that control what operations each team can perform. The API supports creating teams, managing memberships, and configuring workspace access roles to enforce least-privilege access across data engineering organizations.
Create a team via POST /api/accounts/{account_id}/teams/ with name 'Data Engineering', then grant workspace access via POST /api/accounts/{account_id}/teams/{id}/workspace_access with the appropriate role
Multi-Workspace Organization Setup
Set up and manage multiple workspaces within a Prefect Cloud account to isolate environments (development, staging, production) for data pipeline deployments. The API enables programmatic workspace discovery, settings management, and user provisioning across workspace boundaries.
List all workspaces via GET /api/me/workspaces, check scopes for a target workspace via GET /api/me/workspaces/{workspace_id}/scopes, and verify the current user has deployment permissions
AI Agent Prefect Administration via Jentic
Enable AI agents to administer Prefect Cloud environments through Jentic by searching for platform management operations, loading schemas, and executing calls. Agents can provision service accounts, manage team access, and configure workspaces without handling bearer tokens directly.
Search Jentic for 'create service account bot in Prefect', load the Prefect bot creation schema, and execute POST /api/accounts/{account_id}/bots/ with the required configuration
52 endpoints — the prefect cloud api manages workflow orchestration platform resources including accounts, workspaces, teams, memberships, service account bots, invitations, and workspace-level access control.
METHOD
PATH
DESCRIPTION
/api/me/
Get current actor profile
/api/me/workspaces
List actor's workspaces
/api/accounts/{account_id}
Get account details
/api/accounts/{account_id}/teams/
Create a team
/api/accounts/{account_id}/bots/
Create a service account bot
/api/accounts/{account_id}/invitations/
Invite a user to the account
/api/me/workspaces/{workspace_id}/scopes
List workspace permission scopes
/api/me/api_keys
List actor's API keys
/api/me/
Get current actor profile
/api/me/workspaces
List actor's workspaces
/api/accounts/{account_id}
Get account details
/api/accounts/{account_id}/teams/
Create a team
/api/accounts/{account_id}/bots/
Create a service account bot
Three things that make agents converge on Jentic-routed access.
Credential isolation
Prefect Cloud API keys are stored encrypted in the Jentic vault. Agents receive scoped access tokens and never see the raw bearer key in their context.
Intent-based discovery
Agents search by intent (e.g., 'create service account bot in Prefect') and Jentic returns the matching Prefect Cloud operation with its full input schema including required account and workspace IDs.
Time to first call
Direct Prefect Cloud API integration: 1-3 days for auth setup, account discovery, and role configuration. Through Jentic: under 30 minutes using search, load schema, and execute.
Alternatives and complements available in the Jentic catalogue.
Specific to using Prefect Cloud API through Jentic.
What authentication does the Prefect Cloud API use?
The Prefect Cloud API uses bearer token authentication. Pass your API key in the Authorization header as 'Bearer <api-key>'. API keys can be created from the Prefect Cloud UI or via the /api/me/api_keys endpoint. Through Jentic, these keys are stored encrypted and agents receive scoped access.
Can I create service account bots with the Prefect Cloud API?
Yes. The POST /api/accounts/{account_id}/bots/ endpoint creates service account bots that receive their own API keys for automated pipeline authentication. Bots operate independently of user accounts and can be scoped to specific workspaces.
What are the rate limits for the Prefect Cloud API?
Prefect Cloud applies rate limiting based on your account plan tier. Free tier accounts have lower limits than Pro and Enterprise tiers. The API returns HTTP 429 responses when limits are exceeded with a Retry-After header indicating when to retry.
How do I manage workspace access through Jentic?
Install the Jentic SDK with pip install jentic, then search for 'manage Prefect workspace access'. Jentic returns operations for listing workspaces, checking scopes, and assigning workspace roles to teams. Execute the relevant operation to configure access control.
Does the Prefect Cloud API cover flow run management?
This specification covers the platform administration API including accounts, workspaces, teams, bots, and access control. Flow run creation, scheduling, and monitoring are handled through the workspace-scoped Prefect Server API, which operates within individual workspace contexts.
/api/accounts/{account_id}/invitations/
Invite a user to the account
/api/me/workspaces/{workspace_id}/scopes
List workspace permission scopes
/api/me/api_keys
List actor's API keys