Team Management

Manage who has access to your VeriSwarm workspace, what they can do, and switch between workspaces when you belong to more than one.

Workspace Model

When you register for VeriSwarm, a workspace (tenant) is created automatically. Every workspace is fully isolated -- agents, events, scores, keys, and configuration are scoped to a single workspace and never leak between them.

A user can belong to multiple workspaces. For example, a consultant might have access to three different clients' workspaces. Your active workspace determines which agents and data you see in the dashboard.

Roles

Every workspace member has one of three roles:

Role	Invite/Remove Members	Manage Agents & Config	View Agents & Scores	Billing & API Keys
Owner	Yes	Yes	Yes	Yes
Admin	Yes	Yes	Yes	Yes
Member	No	Yes	Yes	No

Owner -- The account that created the workspace. Cannot be removed. There is exactly one owner per workspace.
Admin -- Full management capabilities including inviting and removing team members.
Member -- Can work with agents, view scores, and use integrations, but cannot modify team membership or billing.

Inviting Members

To invite someone to your workspace, the invitee must already have a VeriSwarm account with a verified email address.

Via the Dashboard

Navigate to Account > Settings > Team and click Invite Member. Enter the team member's email and select their role (admin or member).

Via the API

curl -X POST https://veriswarm.ai/v1/public/providers/team/invite \
  -H "x-account-access-token: YOUR_SESSION_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "colleague@example.com",
    "role": "member"
  }'

Response:

{
  "status": "invited",
  "user_id": "usr_abc123",
  "role": "member"
}

If the user was previously removed from the workspace, they are re-activated with the specified role rather than creating a duplicate membership.

Error cases:

Status	Detail
403	Only workspace owners and admins can invite members
404	No account found with that email. They must register first.
400	Invitee must verify their email address before being added to a workspace.
409	User is already a member of this workspace

Listing Team Members

Via the Dashboard

Navigate to Account > Settings > Team to see all active members with their roles, MFA status, and join dates.

Via the API

curl https://veriswarm.ai/v1/public/providers/team \
  -H "x-account-access-token: YOUR_SESSION_TOKEN"

Response:

[
  {
    "membership_id": 1,
    "user_id": "usr_abc123",
    "email": "owner@example.com",
    "display_name": "Alice",
    "role": "owner",
    "is_active": true,
    "mfa_enabled": true,
    "joined_at": "2026-01-15T10:30:00Z"
  },
  {
    "membership_id": 2,
    "user_id": "usr_def456",
    "email": "colleague@example.com",
    "display_name": "Bob",
    "role": "member",
    "is_active": true,
    "mfa_enabled": false,
    "joined_at": "2026-03-20T14:00:00Z"
  }
]

Removing Members

Only owners and admins can remove members. You cannot remove yourself or the workspace owner.

When a member is removed:

Their membership is marked inactive.
All active sessions for that user are immediately revoked.
They lose access to the workspace and all its data.

Via the API

curl -X DELETE https://veriswarm.ai/v1/public/providers/team/usr_def456 \
  -H "x-account-access-token: YOUR_SESSION_TOKEN"

Response:

{
  "status": "removed",
  "user_id": "usr_def456"
}

Workspace Switching

If you belong to multiple workspaces, you can switch between them from the dashboard or the API.

Via the Dashboard

Click the workspace name in the top navigation bar to open the workspace switcher. Select the workspace you want to activate.

Via the API

List your workspaces:

curl https://veriswarm.ai/v1/public/accounts/workspaces \
  -H "x-account-access-token: YOUR_SESSION_TOKEN"

Response:

{
  "active_tenant_id": "ten_abc123",
  "workspaces": [
    {
      "tenant_id": "ten_abc123",
      "name": "Acme Corp",
      "plan_code": "pro",
      "role": "owner",
      "is_current": true,
      "joined_at": "2026-01-15T10:30:00Z"
    },
    {
      "tenant_id": "ten_def456",
      "name": "Client Project",
      "plan_code": "starter",
      "role": "admin",
      "is_current": false,
      "joined_at": "2026-03-10T09:00:00Z"
    }
  ]
}

Switch workspace:

curl -X POST https://veriswarm.ai/v1/public/accounts/workspaces/ten_def456/switch \
  -H "x-account-access-token: YOUR_SESSION_TOKEN"

Response:

{
  "status": "switched",
  "active_tenant_id": "ten_def456",
  "mfa_cleared": true
}

Note that switching workspaces clears your MFA verification for the current session. You will need to re-verify MFA for sensitive operations in the new workspace. This is a security boundary -- each workspace is treated as a separate trust context.

Best Practices

Enable MFA for all team members. The team list shows MFA status at a glance. Sensitive operations (webhook management, IP allowlist changes, kill switch) require MFA verification.
Use the member role by default. Only promote to admin when someone needs to manage team membership or billing.
Audit your team regularly. Remove members who no longer need access. Removal is immediate and revokes all active sessions.