VisionVolve

Email

Password

Forgot password?

or

Reset your password

Enter your email and we'll send a reset link.

Email

Back to login

Set new password

Enter your new password below.

New password

Confirm password

Back to login

IAM Admin

Your Services

Select a service to continue

Your agents

Personal access tokens let an agent / MCP / CLI act on your behalf. Revoke any here.

Connected apps

OAuth apps you've authorized (e.g. Claude, Cursor). Revoking cuts them off within minutes.

Users Services Clients Approvals

My requests Connections Agents

Users

Email	Name	Status	Role	Created	Actions

Services

Suite apps & APIs — the resources users hold roles on (e.g. catalog, content-hub). Each defines its roles + OAuth scopes (app:read|write|admin). This is not the connecting software (Claude, Cursor) — that's Clients.

Agents

Personal access tokens let an agent / MCP / CLI act on your behalf. Actions are attributed to you; revoke any agent here.

My requests

Gated changes you proposed and their status. You can withdraw one while it's still pending. (Reviewing others' changes lives under Administration → Approvals.)

Connections

OAuth apps & agents (e.g. Claude, Cursor) you've authorized to act on your behalf. Revoking cuts the app off within minutes.

Clients

Registered OAuth 2.1 clients (MCP / agent connectors). Clients can also self-register via Dynamic Client Registration; revoke any here.

Approvals

Privileged changes (gates G4/G5) requiring human approval under dual-control. You can't approve a change you proposed.

Details

Add New User

Email

Name

Password

Register App

App ID

Lowercase, starts with a letter; hyphens allowed. This is the canonical app id used in JWT permissions and cannot be changed later.

Name

Allowed roles

Comma-separated.

Scoped permissions (per-scope roles)

Allowed scopes (optional)

Comma-separated allow-list of valid scope values (CA-SEC-03). Blank = no restriction.

OAuth/MCP enabled (requestable as app:read|write|admin scopes)

Login URL (optional)

Callback URL (optional)

Register OAuth Client

Client name

Shown to users on the consent screen.

Redirect URIs

Comma-separated. https (or http loopback). Exact-matched at authorize time.

Scope ceiling (optional)

Max scopes this client may request. Blank = any OAuth-enabled scope.

Confirm

Connect an agent

Agent label

Scope (optional)

e.g. catalog:viewer, workshop:facilitator:cohort:x. Leave blank to delegate all your current access.

Expires in (days) (optional)

Copy your token now

This is shown once. Give it to your agent / MCP. Store it securely — you can't see it again.