Account & access
Signing in
No passwords. Enter your email for a magic link (valid for a short time, single use), or Continue with Google. A session lasts seven days, extended each day you use it; sign out from any device from the account menu. If an account is deactivated, every session ends immediately.
Organisations and roles
Resources and billing belong to organisations. Invite people by email; each gets a role:
| Role | Can |
|---|---|
| owner | everything, including deleting the organisation |
| admin | create and delete resources, manage members and billing |
| member | change existing resources, read credentials and logs |
| viewer | see resources and the balance; nothing else |
Reading a credential (a database password, a storage key) counts as a change: viewers cannot.
The CLI and scripts
cloud login signs the CLI in through your browser and gives it a normal seven-day session; nothing is stored
but that session. For CI and scripts, create an API token under Settings → API tokens:
- A token is bound to one organisation and a role no higher than yours. It can never reach another organisation you belong to, and if your own role is later reduced, the token's effective role is reduced with it.
- Lifetime defaults to 7 days; choose up to one year when creating it. The secret is shown once.
- Use it as
CLOUD_TOKENin CI, orecho "$TOKEN" | cloud login --token-stdin. Revoke it from the same page; revocation is immediate.
Deleting your account
Under Settings. This removes every organisation you own and everything in them; there is no recovery. Transfer ownership first if others depend on those resources.