From the source
Amp added Service Accounts, workspace-owned accounts that are not tied to a single user, so team work can outlive the person who set it up.
- Workspace admins create the accounts, which carry their own API keys and third-party credentials.
- Threads created under a service account are visible to other workspace members and are multiplayer, meaning members can send messages in them.
- Amp warns that because anyone in the workspace can drive those threads, admins should only assign credentials they would be happy bestowing on all workspace members.
- Amp names two patterns that fit: codebase review and maintenance, such as reviewing every pull request or keeping docs accurate, and programmatic work, such as a CI job that spawns a thread via amp -ox when a build fails.
- Using a service account's API key for that invocation makes the thread belong to the service account instead of whoever set up the pipeline.