Skip to main content

My account

The avatar menu in the top bar opens your personal settings. Everything here is yours across all workspaces you belong to.

Profile​

Name, interface language, timezone (quiet hours and displayed times follow it), and your phone number for voice alerting. The number must be verified to ever be called: verify places a call that speaks a 4-digit code, you type it back, done. Verification calls are limited to three a day with a short pause between them, and the button counts down the pause. Once verified, the number is locked and the verified pill is all you see: there is no re-verify and no separate "call me" switch, because the verified number is your consent to be called. To change or stop it, remove the number with the x in the field and enter a new one, which starts unverified. Email is not editable: it is your verified sign-in identity.

Security​

  • Password: change it here (your first sign-in after an invite asks for a new password without the old one).
  • Two-factor authentication: a code on sign-in, delivered over your connected channels (Telegram first, then browser push, then email). The toggle only offers itself when at least one delivery target exists, so 2FA can never lock you out by construction.
  • Active sign-ins: every browser currently signed in as you, with its browser and system, the address it comes from, when it signed in and when it last did something, the one you are reading from marked as such, and an end button per row plus end all others. Ending a sign-in takes effect within a minute, and so does a password change, which ends every other browser; a locked account is signed out the same way. A sign-in is bound to the browser that made it and lives for a working day of inactivity; it also survives maintenance on our side, so a page you had open does not throw you back to the login form when the console behind it is replaced.
  • Sessions and devices: trusted devices with a de-authorize button, and the recent sign-ins journal (successes and failures, with sources, including a sign-in that was carried over during maintenance), so "was that me?" has an answer.

Notification channels​

Your personal channels (Telegram, browser push, email, webhook) with per-channel toggles, severity floor and quiet hours, plus the personal ladder: up to three steps with delays, which decides in which order and how fast a critical incident reaches you, read back as one sentence. Warnings and infos can be muted per channel; critical is never mutable. The on-call shift reminder (thirty minutes before your shift) has its switch here too. Details and the connect flows: Notifications.

Deleting your account​

Account erasure (the GDPR right) is done on request: your personal data (name, contacts, channels, sessions) is anonymized while the workspace history your teams rely on stays intact and truthful. If you own a workspace, ownership has to be handed over or the workspace closed first.

API tokens​

Mint personal tokens for the REST API here. A token is bound to one workspace at creation, carries a scope (read, act, or admin) that can never exceed your own role there, and dies with your membership. The plaintext shows exactly once at mint; revoke from the same list. Workspace-level AI agent tokens (MCP) live in Settings, AI agents instead, see Integrations.