Roles
| Role | Permissions |
|---|---|
| Owner | Full access. Manage members, API keys, billing. |
| Admin | Manage members and API keys. Cannot transfer ownership. |
| Member | Read access to cards and cardholders. Cannot manage keys or members. |
API keys
Each organization can have multiple API keys. Keys are created by owners or admins and authenticate requests to the REST API.- Keys use the format
sk_test_* - Each key has its own rate limit (default: 1,000 req/hour)
- Keys can be rotated or revoked at any time
Status
Organizations can be active or suspended. API requests from suspended organizations return403 Forbidden.