Account
Team and roles
Invite people to a workspace and choose what each of them can do.
Roles
Each role includes everything in the roles above it.
| Role | Can |
|---|---|
| Viewer | See every page and export CSVs |
| Editor | Manage prompts, competitors and opportunities; re-run site checks |
| Admin | Manage members and invites, API keys, webhooks, alerts, billing, share links, branding and connected apps |
| Owner | Everything, including changing or removing other owners and admins |
A workspace always keeps at least one owner.
Invites
Admins invite people from Members by email. Invites are tied to that address, expire after 14 days, and can't grant a role above your own. Pending invites count toward your plan's seats.
Signing in
Onym has no passwords. Sign in with a one-time email link, Google or GitHub. Accounts are matched by verified email address, so all three methods reach the same account. Sessions last 30 days.
API keys and people
API keys belong to the workspace, not to a person, so they keep working when someone leaves. Revoke and replace keys in Settings → API and MCP when a teammate who had one leaves.