VisionVolve

Work or personal email

Password

Forgot password?

or continue with

Reset your password

Enter your email and we'll send a reset link.

Email

Back to login

Set new password

Enter your new password below.

New password

Confirm password

Back to login

IAM Admin

Your Services

Select a service to continue

Your agents

Personal access tokens let an agent / MCP / CLI act on your behalf. Revoke any here.

Connected apps

OAuth apps you've authorized (e.g. Claude, Cursor). Revoking cuts them off within minutes.

Users Services Clients Company logins Approvals Support sessions Access requests Access groups Policy

My access My requests Connections Agents

Users

Who each account belongs to, and when they last signed in.

Status Set by admin only

Updating…

	Class	Status			Actions

Rows per page

Services

Suite apps & APIs — the resources users hold roles on (e.g. catalog, content-hub). Each defines its roles + OAuth scopes (app:read|write|admin). This is not the connecting software (Claude, Cursor) — that's Clients.

Agents

Personal access tokens let an agent / MCP / CLI act on your behalf. Actions are attributed to you; revoke any agent here.

My requests

Gated changes you proposed and their status. You can withdraw one while it's still pending. (Reviewing others' changes lives under Administration → Approvals.)

Connections

OAuth apps & agents (e.g. Claude, Cursor) you've authorized to act on your behalf. Revoking cuts the app off within minutes.

Clients

Registered OAuth 2.1 clients (MCP / agent connectors). Clients can also self-register via Dynamic Client Registration; revoke any here.

Approvals

Privileged changes (gates G4/G5) waiting for a human super-admin. One approval is enough; you may approve your own, with a fresh sign-in. You can't approve a change you proposed.

Details

Add New User

Email

Name

Password

Register App

App ID

Lowercase, starts with a letter; hyphens allowed. This is the canonical app id used in JWT permissions and cannot be changed later.

Name

Allowed roles

Comma-separated.

Scoped permissions (per-scope roles)

Allowed scopes (optional)

Comma-separated allow-list of valid scope values (CA-SEC-03). Blank = no restriction.

OAuth/MCP enabled (requestable as app:read|write|admin scopes)

Login URL (optional)

Callback URL (optional)

Register OAuth Client

Client name

Shown to users on the consent screen.

Redirect URIs

Comma-separated. https (or http loopback). Exact-matched at authorize time.

Scope ceiling (optional)

Max scopes this client may request. Blank = any OAuth-enabled scope.

Confirm it's you

Your sign-in is older than 5 minutes. Sign in again to continue; you'll come back to the same request to confirm.

Or confirm with your password:

Password

Change class

Account class

This changes whether the account counts as VisionVolve staff. You'll confirm your sign-in before it saves.

Reason 0 / 500 (at least 10)

Recorded in the audit log as iam.user.class.override.

Mark accounts as test accounts

Email pattern * matches any characters before the @. The domain must be exact.

Reason

Type the number to confirm

Confirm

Connect an agent

Agent label

Scope (optional)

e.g. catalog:viewer, workshop:facilitator:cohort:x. Leave blank to delegate all your current access.

Expires in (days) (optional)

Copy your token now

This is shown once. Give it to your agent / MCP. Store it securely — you can't see it again.