Teams
Teams, roles and agencies
A workspace holds your apps, your team, your API keys and your webhook. Invite people by email, give them a role, and label each app with the client it belongs to.
Signing in
There are no passwords. Enter your email on the sign-in page and we send a link that works once and expires in 20 minutes. Signing in keeps you signed in on that browser for 30 days, or until you sign out.
Your first sign-in creates a personal workspace with you as its owner, and links any free checks you ran with the same email so they appear in your dashboard.
Workspaces
Everything is grouped by workspace: apps, members, pending invites, API keys, the webhook and the plan. You can belong to several workspaces (your own, a client’s, an agency’s) and switch between them from the dashboard.
Roles
There are two roles. Owners manage the workspace; members do the day-to-day work.
| Action | Member | Owner |
|---|---|---|
| See apps, checks, reports and receipts | Yes | Yes |
| Add, verify, edit and delete apps | Yes | Yes |
| Run checks, change schedules, toggle badges | Yes | Yes |
| Approve, reject and answer questions | Yes | Yes |
| Create and revoke API keys | Yes | Yes |
| Send a webhook test, request an upgrade | Yes | Yes |
| Leave the workspace | Yes | Yes, if another owner remains |
| Rename the workspace, set the webhook URL | No | Yes |
| Invite people, cancel invites | No | Yes |
| Change roles, remove members | No | Yes |
A workspace always keeps at least one owner. To step down, make someone else an owner first.
Inviting people
- In Settings → Team, enter their email and choose member or owner.
- They get an email with a join link. It expires after 14 days.
- They sign in with the address the invite was sent to, and they’re in. Someone already signed in can accept from the same link.
curl -s -X POST https://api.patchlabs.dev/workspaces/$WORKSPACE_ID/invites \
-H "Authorization: Bearer $PL_SESSION" -H 'Content-Type: application/json' \
-d '{"email": "dev@client.com", "role": "member"}'- Inviting the same address again replaces the earlier invite with a fresh link.
- Pending invites count towards your seats, so cancel ones you no longer need.
- If the workspace has no free seat when they accept, the invite asks the owner to upgrade.
Seats
Free has 1 seat, Maker 2, Agency 10, and Enterprise whatever we agree. A seat is a member or a pending invite. See plans.
Removing people
Owners can remove anyone; members can remove themselves. Removing someone doesn’t touch the apps, checks or decisions they made: their decisions keep their name in the receipts.
Client labels
Each app can carry a short label, such as the client’s name. It shows in the dashboard and in every alert, so “New leak found in shop-app (Acme)” tells you whose app it is at a glance. Set it when adding the app or later:
curl -s -X PATCH https://api.patchlabs.dev/apps/$APP_ID \
-H "Authorization: Bearer $PL_SESSION" -H 'Content-Type: application/json' \
-d '{"client_label": "Acme"}'For agencies
Two set-ups work well. Pick by who should see what.
One agency workspace
All client apps in your workspace, each with a client label. Your team sees everything, alerts name the client, and one Agency plan covers 10 apps (+£8 per extra app).
A workspace per client
Each client gets their own workspace and you’re a member or owner. Invite the client’s engineer so they receive alerts and can answer the business questions themselves.
Handing an app over
Apps can’t be moved between workspaces yet. To hand one over, the client adds the repo to their own workspace and verifies it (a new code, the same one-file step), and you delete it from yours. Deleting an app also deletes its checks, reports and receipts, so save any receipts you want to keep before you do.
Your data
- Export: Settings → Your data → Download my data (JSON), or
GET /me/export, downloads everything we hold about you as JSON: profile, sessions, workspaces and apps, free checks, API keys you created, invites, upgrade requests, decisions and answers. - Delete: Settings → Delete account → Delete my account, or
DELETE /me. We delete your account, sessions and your free checks. A workspace you own alone is deleted with its apps, checks and keys; if it has other members, the longest-standing one becomes its owner instead. Your past decisions stay in receipts, signed as “a former member”.