Accounts and team access

Setup requires the installation secret from the API startup log. The first administrator is verified automatically and can continue directly to sign-in. There is no public self-registration that bypasses team invitations.

Role	Access
Administrator	Manage team members, connections and team settings, and compose or inspect posts.
Member	Compose, save drafts, upload media, schedule and inspect delivery results.
Viewer	Inspect team data without writing or managing connections.

Administrators manage invitations and roles in Team Settings. Account Settings contains profile, date/time preferences, password, sessions, passkeys, personal API keys and MCP connections. Passkeys act as a second factor. Keep a recovery method available before changing account security. SMTP enables account-email workflows. Invitations and password recovery use short-lived proofs, and password or role changes revoke affected client grants. A human-owned MCP connection cannot exceed the current role. Role changes revoke it and require approval again. For operator recovery when normal account email is unavailable, use the operations guide. Recovery proofs and installation secrets are credentials; share them privately and never place them in screenshots or support issues.