Your agency has asked for access to Clerk. You don't need to share your password for it. Clerk lets you add them with their own login, choose exactly what they can do, and remove them when the project ends. These are the clicks, checked against Clerk's own help pages in November 2026.
Which role to choose
Pick the narrowest role that lets your agency do the work. Owner is usually the right one.
| Role | What it allows | For an agency |
|---|---|---|
| Owner | Full access to every application in the workspace, including Secret Keys, domains, billing and members. On Hobby and Pro, the only role that can make changes. | Usually the right one |
| Admin | Manages applications, instances, configuration, Secret Keys and billing, but cannot delete applications. Business plan only. | If the work needs it |
| Developer | Changes configuration, Secret Keys, users and Organizations in development instances only. Business plan only. | If the work needs it |
| Viewer | Reads application configuration and workspace information without changing anything. | If the work needs it |
Add your agency to Clerk
Open Team Check that the workspace at the top left is the one that holds your application.
- In the Clerk Dashboard, open the workspace dropdown at the top left and select the workspace that holds your application.
- Go to the Team page and select Invite user, or select Invite at the top of the Dashboard.
- In the Invite user form, enter your agency's email address, select the Owner Role and select Invite.
Hobby and Pro workspaces have up to 3 dashboard seats. Business includes 10, then $20 a month for each extra seat. your agency joins the whole workspace, so it sees every application in it.
How you both know it worked
Clerk emails your agency an invitation from clerk.com. Once they accept it, they show in your Clerk account's list of people with access, where you can see or change their role at any time.
Remove access when the project ends
- In the Clerk Dashboard, select the workspace that holds your application from the workspace dropdown and go to the Team page.
- Remove your agency's email address from the team.
- In your application, for both Development and Production, open the API keys page and delete any key under Secret keys that your agency created.
Do you have to share your password?
No. Every step above uses Clerk's own invite, so your agency signs in with their own account, your two-step verification stays on, and anything they change is recorded under their name. How to give a developer access without sharing your password covers the other accounts agencies usually ask for.
Doing this for every client?
Agencies can send each client one GetSetKeys link instead of a page like this. It walks the client through Clerk and the other platforms the project needs, and checks that each step is done.