Team members: invites, roles and access

Dashboard → Members is owner-only — a Member doesn't see the Members link in the nav, and the page 404s if they open the URL directly. Only an account's owner(s) can invite, remove, or change anyone's role.

Inviting someone

Enter an email and pick a role (Member or Owner), then Send invite. The invite is emailed as a link and is only good for 7 days; it can only be accepted by someone signed in with that exact email (case-insensitive) and a verified email address — signing in as a different account doesn't let you claim someone else's invite. An account can have at most 5 members total, owners included — both sending a new invite and accepting one are refused past that limit. A pending invite can be revoked from this page any time before it's accepted.

Accepting an invite

The link opens /invite?token=.... Not signed in yet: it prompts you to log in or sign up first, then re-open the same link. Signed in: one Accept invite click adds you to that account at the role the invite was sent with, and switches your session into it. If you're already a member of other accounts, an account switcher appears in the nav once you belong to more than one.

What a Member can and can't do

The panel has exactly two roles — Owner and Member — but the difference you'll actually see today is enforced by the panel itself (the session-role checks behind each button, and the four pages — Wallet, Members, API keys, CLI login — that 404 outright for a Member), not by a role check the server applies to every action. A Member can do everything day-to-day through the panel as it stands: create, start, stop, restart, and resize a server's RAM; everything under Files, Console, Players (whitelist, op, ban, kick), Mods/Plugins, Backups, Schedules, Database, SFTP, worlds (switch, reset, delete), and Discord bind/unbind; and create, attach to, detach from, or delete a server network. A Member cannot: delete a server, switch a server's plan between Flat and Metered, do anything on the Wallet page (top up, auto top-up, spend cap — the page isn't even visible to them), manage members or invites, create or revoke API keys, or approve a CLI device-code login.

Worth knowing: a few of the actions listed as Member-allowed above — switching, resetting, or deleting a world, enabling/rotating/disabling SFTP, and creating or deleting a network — are actually gated to owners at the API layer too, but only when the caller identifies which specific team member is acting; the panel doesn't send that identity on these particular calls today, so the stricter check never engages and any Member can do them through the panel as-is. That's a documented interim state of the panel, not a guarantee — treat it as something that could tighten later, not a permanent Member privilege. And regardless of any of this: a Member can still create servers and run up usage against the account's wallet even though they can never see the wallet itself.

Revoking access

Remove on a member's row removes them from the account entirely — they lose access to every server on it immediately. Make member / Make owner toggles a role in place. The panel hides both controls on your own row (so you can't casually remove or demote yourself by mistake) and on the last remaining owner's row — but only the last-owner rule is enforced again on the server; an account can never actually end up with zero owners. Self-removal isn't separately blocked server-side, only in the panel's own UI.

Troubleshooting

"invite is for a different email." You accepted the link while signed into an account whose email doesn't match who the invite was sent to — log in as that email (or verify it) and try the link again.

Invite link says it's expired or already used. Invites expire after 7 days and can only be accepted once; ask the owner to revoke the old one and send a fresh invite.

Can't invite anyone new / can't accept an invite. The account is at its 5-member cap, owner included — remove someone first, or the invite is refused with "member limit reached" either way.

A team member can't see Wallet, Members, or API keys. Expected for the Member role — those pages are owner-only and simply aren't in their nav.