Admin and settings
Manage organizations, members, API keys, and integrations in the web app and the CLI.
Org settings live in the web app. The CLI covers the same surfaces where automation helps; deep how-tos stay on the linked pages.
| Task | Web app | CLI |
|---|---|---|
| Switch / inspect org | Org switcher | ax org |
| Invite members | Settings → Members | ax org invite (member only) |
| Roles, domains, rename | Settings | UI only |
| API keys | API keys (/account/api-keys) | ax api-key list / revoke |
| Secrets | Secrets | ax secret → Secrets |
| GitHub / LLM providers | Integrations | ax integrations, ax llm-provider |
| Plans, credits, and spend | Billing and Usage | ax credit |
Organizations
Create an org in the web app (/orgs/create), then switch with the sidebar org switcher. Rename and delete are under Settings → General.
ax org list # * marks the active org
ax org view # org name, org id, your role, 514.ax URL
ax org switch <ORG_ID>Most CLI commands also take --org <org-id> for a one-off without changing the saved active org. Login and credentials: ax auth.
Members and invites
Settings → Members is the full membership surface: invite, remove, and change roles. Settings is also where you register and verify email domains (required for CLI invites).
| Role | Typical access |
|---|---|
org:admin | Members, domains, org API keys, billing/credits, LLM providers |
org:member | Run experiments, use org secrets, personal spend |
Enterprise security (when provisioned) | LLM providers via org:llm_providers:manage; not a substitute for admin |
CLI invites are always members. Promote someone in Settings → Members.
# Org admin; emails must use a verified org domain
ax org invite dana@acme.com lee@acme.comMembership is the day-to-day trust boundary (any member can use org secrets). Details: the org secret store, ax org invite.
API keys
Keys authenticate the CLI and the HTTP API. Create them under Manage → API keys (account route /account/api-keys). The CLI lists and revokes only; it never prints the secret again.
| Scope | Who creates | Use |
|---|---|---|
| User | Any signed-in user | Your identity across orgs you belong to |
| Organization | Org admin | Pinned to one org (CI, shared automation) |
Expiration choices in the UI: 1d, 7d, 30d, 90d, 1y (default 1y). ax auth login also mints a key.
ax api-key list
ax api-key view <KEY_ID>
# Rotate: revoke, then create a new key in the UI (or ax auth login)
ax api-key revoke <KEY_ID> --yesIntegrations
Manage → Integrations has two tabs:
| Tab | What it does | Docs |
|---|---|---|
| GitHub | Install the GitHub App, link repos for !ax run | GitHub CI, ax integrations |
| LLM Providers | Bring your own key, gateway toggle, Claude Code gateway compatibility | Model providers, ax llm-provider |
ax integrations gh connect
ax integrations gh link my-experiment owner/repo
ax llm-provider listRelated
- Billing and usage: plans, prepaid credits, and spend
- Secrets: experiment env vars and the org secret store
- Model providers: managed access, BYOK, and local keys
- GitHub CI: PR-triggered runs
ax org·ax api-key·ax secret