Invite your team and secure your account

Everything on this page happens in the dashboard, on Settings and in the organization switcher. The API side, with the member and invitation routes, is in Organizations and pods.

Invite people

Owners and admins can invite. Members see the list but can’t change it.

Open Settings → Members and choose Invite.
Enter the person’s Email and pick a Role. Only owners can invite someone as an owner.
Choose Send invitation. They get an email with a link to sign in and join. The link works for 7 days.

Your plan includes a number of seats. Members and pending invitations both count. When you reach the limit, Invite is turned off and a note names your plan’s limit. Everyone already in the organization keeps access. An owner can change plans under Billing.

Pending invitations

Invitations that haven’t been accepted are listed under Pending invitations, with the role, when each was sent and when it expires.

Resend emails the invitation again.
Revoke stops the link from working. Type DELETE and choose Revoke invitation. You can invite the person again later.

Only owners can resend or revoke an invitation for the owner role.

Roles

Role	Can
Owner	Everything an admin can, manage owners, and delete the organization.
Admin	Invite people, change roles and remove members.
Member	Use the organization, but not manage people.

To change someone’s role, pick a new one from the list in their Role column. Admins can’t change or remove owners. An organization always keeps at least one owner.

The Sign-in column shows how each person signs in, with their latest method first.

Remove someone or leave

Remove on a person’s row takes them out of the organization. Type DELETE and choose Remove member.
Leave on your own row takes you out. Type DELETE and choose Leave organization. To come back, someone has to invite you again.

Access ends at once. API keys the person created (CLI keys too) are revoked, apps they connected are disconnected, and invitations they sent are revoked. Keys with no recorded creator stay: review them on API keys.

Secure your account

The Security panel is at Settings → Security. These settings belong to you, not to the organization. Each person adds their own passkeys.

Some changes need a recent sign-in. The dashboard then shows Confirm it’s you: confirm with a passkey or with a code emailed to you. You won’t be asked again for 10 minutes.

Add a passkey

A passkey signs you in with your fingerprint, face or device PIN instead of an emailed code.

Choose Add a passkey.
Follow your browser’s or password manager’s prompt.

The passkey appears in the list with when it was added and last used. Synced means your password manager keeps it on all your devices. Use Rename to give it a clearer name, or Remove to delete it. Removing a passkey signs out every session it signed in.

Turn off email codes

With at least one passkey, you can turn off Email sign-in codes. MachineMail then sends no code or link to your address, and you sign in with a passkey only. Single sign-on and social sign-in keep working.

While codes are off, you can’t remove your last passkey. Turn codes back on or add another passkey first. If you lose every passkey while codes are off, contact support@machinemail.dev.

Sign out other sessions

Choose Sign out other sessions to sign out of MachineMail everywhere except this browser. Use it after you lose a device.

Switch or create organizations

One person can belong to several organizations. The organization switcher is the organization’s name at the top left of the dashboard.

Switch. Open the switcher and pick an organization. A check marks the one you are on. The others show your role in them.
Create. Choose New organization, enter a Name and choose Create organization. You become its owner and the dashboard switches to it.

Organization settings

Settings → Organization holds the settings everyone in the organization shares:

Name: edit it and choose Save. The Slug and Organization ID can’t be changed.
Undo send: dashboard sends wait 5 seconds so you can undo them. See Approve drafts.
Default inbox: the inbox listed first wherever the dashboard lists inboxes.

Delete an organization

Only owners can delete an organization, and only from the dashboard. It deletes every inbox, message, domain, webhook and key, and every claimed agent. There is no undo.

A paid plan has to be cancelled first, under Billing. If it isn’t, the delete dialog shows an error with Go to Billing. A plan set to cancel at the end of the period still counts until then.

Open Settings → Danger zone and choose Delete organization.
Type the organization’s name. Capitals don’t matter. Choose Send code.
MachineMail emails you a 6-digit code. It works once, for 10 minutes. Choose Send a new code if it doesn’t arrive.
Enter the code and choose Delete organization. Your session moves to another organization you belong to. If there is none, you are signed out.

Deleting an organization lists what is deleted and what stays.

Not in the dashboard

There is no screen to set up single sign-on, to manage pods, or to delete your personal account. Pods are managed with the API. For single sign-on or account deletion, contact support@machinemail.dev.

Troubleshooting

Symptom	Fix
Invite is greyed out	You’ve reached your plan’s seat limit. Revoke a pending invitation, remove someone, or change plans.
There is no Invite button	You are a member. Ask an owner or admin.
Owner is missing from the Role list	Only owners can make someone an owner.
Add a passkey is missing	This browser can’t create passkeys. Try another browser or device.
The Email sign-in codes switch won’t turn off	Add a passkey first.
There is no Danger zone	Only owners see it.
Deleting fails with a billing error	Cancel the paid plan under Billing, and delete once the plan has ended.

Organizations and pods Authentication Connect an agent without code