Govern access across your whole organization.
Role-based access, member management, and API keys in one place. Invite your team, scope every permission, and connect enterprise SSO — without leaving the dashboard.
What it does.
Role-based access
Owner, Admin, Builder, and Viewer roles scope exactly what each member can do.
Team management
Invite members by email, assign a role, and onboard them in seconds.
API key management
Generate, rotate, and monitor keys with permissions inherited from the creator.
Enterprise SSO
SAML 2.0 single sign-on and SCIM user provisioning for larger teams.
Usage & billing
Super Admins track executions, AI tokens, storage, and API calls in one place.
Observable
Authentication, integrations, and runs are logged, traceable, and auditable.
Four roles, scoped to what each person needs.
Every member gets exactly the access their work requires. Owners hold billing and can delete the workspace, Admins manage members and integrations, Builders create and run workflows, and Viewers see results without editing.
Invite your team and assign roles in seconds.
Go to Share, enter a teammate's email, pick a role, and send. Invited members receive an email with a link to join your organization — no manual provisioning, no shared credentials.
Programmatic access, governed by the same roles.
Generate an API key from the Draft & Goal Dashboard to call the API. Each key inherits the permissions of the user who created it, supports rotation and usage monitoring, and is shown only once — so save it securely the moment it's created.
Sign-in that scales with your org.
SSO & OAuth
Email/password, Google and Microsoft OAuth, plus SAML 2.0 single sign-on.
SCIM provisioning
Provision and deprovision users automatically as your directory changes.
2FA & strong auth
Enable two-factor authentication and enforce strong passwords or SSO.
Quarterly reviews
Review member access on a cadence and offboard promptly when people leave.
From input to outcome.
Invite
Add members by email from Share and assign each one a role.
Scope
Roles and API key permissions control exactly what each member can access.
Connect SSO
Wire up SAML 2.0 and SCIM so access follows your identity provider.
Review
Track usage and billing, audit access, and offboard when needed.
Show us the workflow.
We'll show you the 10x.
Bring the marketing workflow that eats your week. We'll build it live, with your data and your models, in 30 minutes.