Team and security
Give everyone their own login, and only what they need
Invite colleagues with a role each, protect every login with two-step verification, and see every change made to the account and who made it.
What you get
Five roles
Owner, admin, finance, support and read-only. Finance holds the money; support handles customers and orders without it.
Enforced by the API
Roles are checked on every request, not only hidden in the dashboard.
Two-step sign-in
A code from an authenticator app on top of the password.
Every change on record
The activity log shows every change to the account, and who made it.
Sessions you control
See where you are signed in and sign a session out at once. Removing a colleague signs them out everywhere.
Scoped access for agents
Assistants connect through MCP with only the permissions you grant, and you can see and revoke each one.
Good to know
- From Settings, Team: send an invitation with a role attached. It expires after seven days.
- Owners and admins. A key belongs to the account, not to the person who made it.
- No. The last owner can never be demoted or removed.