Permissions

A scoped credential lets a script or AI agent use less authority than your dashboard session. Tokay checks memberships and credential action grants for Platform work, while deployed app access uses a separate model.

Last updated

AI agent? Start with llms.txt.

Workspace membership establishes the outer boundary

Workspace roles are Owner, Admin, and Member.

  • Owner and Admin can operate the full Workspace.
  • Member needs explicit Project or Code membership.

Every Workspace has an Owner. Ownership changes through an explicit transfer.

Project roles control application operations

Project roles are Admin, Member, and Viewer.

  • Admin operates the Project and manages membership.
  • Member deploys and configures Services.
  • Viewer sees status and safe identifying information.

Project Config follows source visibility. Secrets remain unreadable even when someone may replace them.

Code roles control the source

Code roles are Read, Write, and Admin. They stay separate from Project roles because the same Code can supply Services to several Projects.

Credential grants only narrow authority

Dashboard sessions use the current membership authority of the Person. API, MCP, Git HTTPS, and SSH credentials carry explicit action grants and never add membership. Removing membership narrows every related credential.

Credential creation uses separate grants for API, MCP, and Git. A bearer created by another bearer must be narrower and cannot create another credential. When a request needs a grant the credential lacks, Tokay names that one permission, so you can add it without widening anything else. Use a Bot with narrower memberships when automation needs a smaller Platform boundary. See Agent identity and credentials.

App access is independent

The People and Bots above manage Tokay. Deployed apps see workspace scoped app People and project scoped Machines. A Tokay owner, admin, or Project member does not automatically open the app.

Each web app or function is Public or Private. Private Services admit the Groups, exact-email People, company domains, and project Machines they allow. Groups may contain People, domains, and Machines. Machine credentials open admitted app Services but cannot manage Tokay. See Who can open your app.