Skip to content

History / Users and API Keys

Revisions

  • Clean up misleading token scoping language in Users-and-API-Keys.md - Clarify that access is managed through project membership, not API token scoping - Tokens inherit user access rather than having their own scope - Simplify explanation of access control model Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

    @hitchhiker hitchhiker committed Feb 4, 2026
    d890f6d

  • Fix remaining token scoping references in documentation - Update Users-and-API-Keys.md: clarify permission check uses user membership, not token scope - Update API-Reference.md: tokens inherit user access, not project-scoped - Update Troubleshooting-FAQ.md: remove outdated "projects" parameter from token creation example - Update team access control FAQ: explain access via project membership, not token scoping All token access now flows through the user who created the token and their project membership (direct or group-based). Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

    @hitchhiker hitchhiker committed Feb 4, 2026
    020a827

  • Remove project_ids token scoping from documentation Tokens are no longer scoped to specific projects. Access control is now handled entirely through project membership (direct user or group). Changes: - Removed project_ids field from all token examples - Updated access model section (User/Groups → Projects) - Updated token creation workflow (no longer scopes to projects) - Updated troubleshooting (no longer mentions project_ids) - Updated CI/CD workflow to use service account membership - Added note about token inheriting user access Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @hitchhiker hitchhiker committed Feb 4, 2026
    75f8f61

  • Add Users and API Keys documentation New guide covering: - OIDC authentication and provider setup - User management (login, logout, current user) - Groups and access control (current and future) - API token creation, usage, and revocation - Token security best practices - Chunking technology during indexing (strategy, configuration, process) - Session management and lifecycle - Common workflows and troubleshooting Also updated Home.md to link to the new guide. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @hitchhiker hitchhiker committed Feb 4, 2026
    3b462bc