Account settings
Operator profile, security, notifications, subscription plan, billing, REST API keys, and account deletion—separate from per-product RSA keys.
Account settings manage you as a platform user—not a product or organization. Product signing keys live under Product → Settings (RSA keys guide); account API keys automate REST calls with scoped JWT-backed credentials.
Route
Open Settings (gear icon) from the sidebar. Tabs are driven by query parameter: profile, security, notifications, manage plan, API keys, and danger zone. Billing and checkout live as adjacent pages for upgrades.
Settings sections
My Profile
Display name, avatar, contact email, timezone preferences. Updates operator identity shown in audit logs and invitations—not license metadata or product RSA keys.
Security
Password change, two-factor authentication, and review of active login sessions on your operator account.
Notifications
Email and in-app preferences: license events, invitations, billing, marketing (per toggles). Does not change customer app telemetry.
Manage plan
Current subscription tier (Free vs Pro), limits on organizations, products, license types, and storage connectors. Upgrade flows link to checkout. Locked products show isSubscriptionLocked in the UI—owners cannot manage until the plan is restored.
Billing
Invoices, payment method, and payment history—commerce surface adjacent to manage plan.
API keys
Generate scoped REST credentials for CI/CD and internal tools:
- Name, description, optional expiration.
- Scopes: Read/Write Licenses, Activations, Products, Releases.
- Secret shown once—store in a vault (full API keys walkthrough).
Danger zone
Delete operator account—irreversible. Does not delete organizations you own; transfer org ownership first.
Auth & users API · Security API · Billing API · System overview
