Settings
Personal profile and account security — contact details, password, API token management, sidebar customisation, and account deletion.
At a glance
| Route | /settings, with /settings/billing |
| Group | Account |
| Page permission | settings |
What it is
Personal profile and account security: name and contact details, password change, API token management, sidebar customisation, and account deletion.
Who it is for
Every user, for their own account.
How it works
Settings are per-user rather than per-workspace.
API tokens
Tokens are SHA-256 hashed and shown exactly once at creation, with configurable expiry and instant revocation. The number permitted is plan-limited.
Sidebar customisation
The sidebar editor persists a per-user module grouping of between 3 and 15 groups.
Account deletion
A sensitive action requiring separate verification.
Features
- Profile management — name and contact details
- Password change
- API token creation, shown once, with configurable expiry and instant revocation
- Plan-limited token counts, enforced server-side
- Sidebar layout customisation into 3 to 15 custom groups
- Account deletion with sensitive-action verification
- Billing sub-page for personal billing detail
How to use it
Complete your profile
So audit entries and approval notifications identify you meaningfully — "who approved this" is much less useful as an email prefix.
Create API tokens only where automation genuinely requires them
Record the value immediately. It is never shown again.
Set an expiry on every token
Rather than creating perpetual credentials.
Revoke tokens immediately when their automation is retired
An unused token is an unnecessary credential.
Customise your sidebar
Surface the modules you use daily and group the rest out of the way.
Why it matters
The show-once, hashed-at-rest token model means a compromised database does not yield usable API credentials.
Why sidebar customisation is not cosmetic
This is a product with a large module surface. A fifty-module sidebar serves nobody.
Letting each user shape it to their role is what keeps the product navigable — and it is the difference between a platform that a finance analyst will open daily and one they will avoid.
Connects to
- Token limits set by Membership
- Permissions assigned in Organization
- API tokens authenticate the FinOps CLI
- Sidebar grouping derives from the module registry underlying the whole Module Reference
Membership
Subscription and entitlement management — plan comparison and change, billing, invoices, usage against limits, the prepaid wallet, and the Apex AI credit ledger.
Help & Updates
Assistance and transparency — a support ticket portal, and a customer-visible history of application errors affecting your workspace.