team and security.md


title: "Invite your team and secure your account" description: "Invite people to a MachineMail organization, set roles, add passkeys, turn off email codes, sign out other sessions, and switch, create or delete organizations." canonical: "https://machinemail.dev/docs/guides/team-and-security"

Invite your team and secure your account

Invite people to a MachineMail organization, set roles, add passkeys, turn off email codes, sign out other sessions, and switch, create or delete organizations.

Source: https://machinemail.dev/docs/guides/team-and-security

Everything on this page happens in the dashboard, on Settings and in the organization switcher. The API side, with the member and invitation routes, is in Organizations and pods.

Invite people

Owners and admins can invite. Members see the list but can't change it.

Open Settings → Members and choose Invite.

Enter the person's Email and pick a Role. Only owners can invite someone as an owner.

Choose Send invitation. They get an email with a link to sign in and join. The link works for 7 days.

Your plan includes a number of seats. Members and pending invitations both count. When you reach the limit, Invite is turned off and a note names your plan's limit. Everyone already in the organization keeps access. An owner can change plans under Billing.

Pending invitations

Invitations that haven't been accepted are listed under Pending invitations, with the role, when each was sent and when it expires.

Only owners can resend or revoke an invitation for the owner role.

Roles

Role Can
Owner Everything an admin can, manage owners, and delete the organization.
Admin Invite people, change roles and remove members.
Member Use the organization, but not manage people.

To change someone's role, pick a new one from the list in their Role column. Admins can't change or remove owners. An organization always keeps at least one owner.

The Sign-in column shows how each person signs in, with their latest method first.

Remove someone or leave

Access ends at once. API keys the person created (CLI keys too) are revoked, apps they connected are disconnected, and invitations they sent are revoked. Keys with no recorded creator stay: review them on API keys.

Secure your account

The Security panel is at Settings → Security. These settings belong to you, not to the organization. Each person adds their own passkeys.

Some changes need a recent sign-in. The dashboard then shows Confirm it's you: confirm with a passkey or with a code emailed to you. You won't be asked again for 10 minutes.

Add a passkey

A passkey signs you in with your fingerprint, face or device PIN instead of an emailed code.

  1. Choose Add a passkey.
  2. Follow your browser's or password manager's prompt.

The passkey appears in the list with when it was added and last used. Synced means your password manager keeps it on all your devices. Use Rename to give it a clearer name, or Remove to delete it. Removing a passkey signs out every session it signed in.

Turn off email codes

With at least one passkey, you can turn off Email sign-in codes. MachineMail then sends no code or link to your address, and you sign in with a passkey only. Single sign-on and social sign-in keep working.

While codes are off, you can't remove your last passkey. Turn codes back on or add another passkey first. If you lose every passkey while codes are off, contact support@machinemail.dev.

Sign out other sessions

Choose Sign out other sessions to sign out of MachineMail everywhere except this browser. Use it after you lose a device.

Switch or create organizations

One person can belong to several organizations. The organization switcher is the organization's name at the top left of the dashboard.

Organization settings

Settings → Organization holds the settings everyone in the organization shares:

Delete an organization

Only owners can delete an organization, and only from the dashboard. It deletes every inbox, message, domain, webhook and key, and every claimed agent. There is no undo.

A paid plan has to be cancelled first, under Billing. If it isn't, the delete dialog shows an error with Go to Billing. A plan set to cancel at the end of the period still counts until then.

Open Settings → Danger zone and choose Delete organization.

Type the organization's name. Capitals don't matter. Choose Send code.

MachineMail emails you a 6-digit code. It works once, for 10 minutes. Choose Send a new code if it doesn't arrive.

Enter the code and choose Delete organization. Your session moves to another organization you belong to. If there is none, you are signed out.

Deleting an organization lists what is deleted and what stays.

Troubleshooting

Symptom Fix
Invite is greyed out You've reached your plan's seat limit. Revoke a pending invitation, remove someone, or change plans.
There is no Invite button You are a member. Ask an owner or admin.
Owner is missing from the Role list Only owners can make someone an owner.
Add a passkey is missing This browser can't create passkeys. Try another browser or device.
The Email sign-in codes switch won't turn off Add a passkey first.
There is no Danger zone Only owners see it.
Deleting fails with a billing error Cancel the paid plan under Billing, and delete once the plan has ended.