Skip to main content
Every request to the Devias server passes one permission check. What differs is who is asking: a person, an API key, a workflow, a module’s server code or an agent.

​
People

Each member of a workspace has one role. An admin changes roles under Settings → Members.

​
API keys

An API key is created under Settings → API keys, with an expiry chosen at creation. It carries its own list of permissions, such as “read and write records”. A key created in the studio can read records; a key with more permissions is created through the API with a permissions map. A key is shown in full once, when it is created, and can be revoked at any time. Use a key for scripts and other services, and give it only what it needs. See Authentication.

​
Workflows and modules

Workflows and a module’s server code act as themselves, not as a person. They can read and write records and run actions. They can never manage the workspace.

​
Agents

An agent acts with the role of the person who asked, and its tool list limits it further. It can never do more than that person could. History records both the agent and the person. See Agents.