Every dataset read passes one access guard, tested on every route. Sign in with single sign-on. Admin, analyst and viewer roles. An audit trail of who did what. Nothing an agent does leaves the workspace without a person approving it.
Stated plainly; nothing here is a roadmap.
OpenID Connect via Keycloak, including Google sign-in. SAML and SCIM provisioning are not offered today.
Admin, analyst, viewer — enforced on every route that changes or reads data.
Sign-ins, user and role changes, key changes, dataset deletions, watcher changes, approvals, billing events, denied data access.
Emails and webhooks from an agent wait for a person; approve once, it runs once.
Bring your own provider key, encrypted at rest; calls made with it are not billed by us.
self-hosted GPUs (vLLM / Ollama). Hosted models only for: agent_chat, agent_new_data, agent_page, agent_writer, ai_eval_judge, page_writer, playbook, seo_advisor, social_writer, vision_documents, watcher_composer.
Not today. Sign-in is OpenID Connect through Keycloak, Google sign-in included.
No. Emails and webhooks from an agent wait for a person to approve them; approved once, they run once.
The session ends on our servers as well as in your browser. From then on it is refused everywhere, even if someone copied it before you signed out.
self-hosted GPUs (vLLM / Ollama). Hosted models are used only for: agent_chat, agent_new_data, agent_page, agent_writer, ai_eval_judge, page_writer, playbook, seo_advisor, social_writer, vision_documents, watcher_composer.