Accounts & Sign-in

Optional single-user login is available in the free self-hosted V1. Full multi-user membership — invites, separate accounts and per-user isolation — is part of V2 and above. See the editions.

Who can get in

A hosted instance is invite-only by design. There is no open sign-up, and there's no setting that turns one on.

The first account created becomes the administrator. Every account after that needs a single-use invite code, issued by an administrator and optionally given an expiry date.

1. 1
   An admin invites you

   They generate a code and send it to you. It works once.

2. 2
   You create your account

   Choose a username and password, enter the code.

3. 3
   You get your own workspace

   Not a shared one — see below.

Repeated failed sign-in attempts lock an account temporarily, so a password can't be guessed at by brute force.

---

Your account is genuinely yours

On a multi-user instance, each person is isolated from every other. This isn't a filter over shared data — the separation is real.

Yours alone	Shared across the instance
Conversations and goal history	Agent profiles
Memory — your history, facts and contacts	Skills approved for organisation-wide use
Your own documents in the Knowledge Base	Organisation-wide knowledge sources
Your identity files — who you are, your goals, your authority policy
Your connected services and credentials
Your connected computers
Your messaging channels
Your audit trail

Your authority policy is your own — what AI Partner may do as you is not a setting someone else controls.

Administrators govern conduct, not content. They can see that you ran goals, what they cost, and what was approved or blocked. They cannot read your conversations, your messages, your documents or your screen.

---

Sessions

You stay signed in across a working session and are refreshed transparently — you won't be logged out in the middle of something. Sessions expire on their own after a period of inactivity, so an unattended browser doesn't stay open indefinitely.

---

If you forget your password

1. 1
   Generate a recovery key now, before you need it

   Settings → Security → Generate Recovery Key. Store it somewhere safe. It's single-use and it's the one thing that gets you back in without an administrator.

2. 2
   Use it when you're locked out

   On the sign-in page, Forgot password → enter the recovery key → set a new password.

3. 3
   No recovery key?

   Your administrator can reset your password for you.

---

Access keys for automation

For scripts, pipelines and anything that needs to reach AI Partner without a person signing in, use an access key rather than your own sign-in.

1. 1
   Generate one

   Settings → API Keys → + Generate Key. Name it for what it's for — "CI pipeline" — and choose whether it may only read, or also act.

2. 2
   Copy it immediately

   It's shown once, and never stored in a form anyone can read back — including you.

3. 3
   Revoke it when it's done

   Settings → API Keys → Revoke. Revocation takes effect immediately.

Give each automation its own key with the narrowest permission that works. Then retiring one thing never means rotating everything.

◆What it has done

Your audit trail — every action, every approval, every refusal.

◆What it may do as you

Your own authority policy — the gate every real action passes.