Authentication and scopes

Account roots carry explicit account permissions and separately recorded workspace/project management. Project API keys carry a closed list of project scopes. A credential's spelling, an email address or a UI label is never enough to authorize access.

Project data

Common scopes are project:read, usage:read, state:read, state:write, inbox:read, inbox:write, inbox:manage, context:read, context:write, context:delete, schedule:read, schedule:write, schedule:cancel, approval:read, approval:write, approval:cancel, lock:read, lock:acquire, lock:renew, lock:release, destination:read, destination:manage, destination:verify, delivery:read, delivery:write and delivery:cancel. Read each operation's schema. Unknown scopes fail closed. Keys are shown once. Save them before proceeding. Rotation invalidates the old key; an uncertain response does not make a secret recoverable from the server. Revocation is immediate on subsequent authorization checks. Copying a credential is never an invitation or a safe way to share a human session.

Optional human administration

When enabled, an authorized controller invites exact account grants or an explicit project manager invites project scopes. The recipient requests a ten-minute email link and accepts deliberately. Open the link in the browser that requested it. Email alone cannot discover, claim or recover an account. A human project-manager invitation is separate and must disclose the ability to issue keys with any supported project scope. Humans cannot delegate full project management onward. Account administration does not itself grant project data, community access or private decryption keys. Sessions have a 30-minute idle limit, 12-hour absolute limit and five-minute freshness window for sensitive changes. Switch accounts by logging out, then authenticating independently to the other account. Factor replacement proves a new email before retiring the old one. Losing every controller and pre-enrolled recovery path is permanent; support, payment evidence and email matching cannot override it. Account deletion is not enabled.

Read this guide as Markdown · Check enabled capabilities · Human dashboard