Roles & permissioning
Decide who can use which models, tools, and credentials, and what an agent is allowed to do.
- Role-based accessReusable roles with granular, custom-scoped permissions.
- Model and tool accessChoose which people and teams can use which models and MCP servers.
- Credential controlsShared secrets stay scoped to the people and agents that need them.
- App guardrailsRules per app that block, tag, or log an action before it runs.





