Account & security
Manage your profile, authentication and protected account operations.
On this page
Personal settings
Open Account to manage your profile and the security features available to your account: email, password, passkeys, MFA, recovery codes and active sessions. Keep recovery information in a secure place and review sessions when you suspect unwanted access.
Protected changes
Sensitive account changes use browser authentication, reauthentication and MFA where required. Follow the authenticated prompts. Do not give your password or recovery codes to an agent, and do not expect a writable MCP connection to bypass those prompts.
Export or delete your account
Use the authenticated account flow. Account deletion, site deletion and visitor erasure are separate actions with different subjects and consequences. Ownership may need to be transferred before an owner can complete an account operation.
Agent support
get_account_management returns account/workspace URLs and the list of protected operations. It helps an agent direct you to the right page while leaving credentials and confirmations in the secure browser flow.
Revoke connected access
Delete API keys you no longer need, disconnect OAuth agents, remove unwanted team access and review sessions. Rotating one kind of credential does not automatically replace every other kind.
Still looking for an answer? Try troubleshooting or get in touch.