Account & Teams

The Account app is the hosted console where you manage your Nanokit identity: your profile, security (MFA & passkeys), active sessions, billing & plan, your team and roles, and a live view of your machine’s resources.

It is served at account.<your-domain> (e.g. account.nanokit.dev) and is a fully client-side SPA — it talks to the Nanokit API gateway for identity and, for the Resource Monitoring view, directly to the bridge running on your own machine.

Account types

Every account has an account type, set at registration and kept in sync with your plan:

Account type	Who it’s for	Can create/own a team?
`personal`	Individual developers	No — can still be invited and join a team
`teams`	Organizations / shared workspaces	Yes

Plan ⇔ account type: the Teams plan implies a teams account; any other plan (DEV, PRO, ULTRA) implies a personal account. Upgrading to the Teams plan in Billing automatically unlocks team creation — there is no separate “become a team account” step.

A personal account can be invited to and join a team (and view/leave it). Only a teams account can create and own a team. Managing an existing team (inviting members, changing roles, renaming, deleting) is governed by your role within that team — so an owner always manages their own team.

Sections

Section	What you do there
Profile	Update your name and email (email changes require a verification link).
Security & Sessions	Enable MFA (email OTP or authenticator app), register passkeys, and review/revoke active sessions.
Teams & Roles	Create a team, invite members by email, assign roles, rename or delete the team.
Billing & Plans	Change your plan, manage your payment method, and download invoices.
Resource Monitoring	Live CPU/memory/container telemetry from your local bridge.

Authentication

Sign-in supports email + password, social login (Google, GitHub, GitLab), passwordless passkeys (FIDO2/WebAuthn), and MFA (email OTP or TOTP). All flows live in the Auth app (auth.<your-domain>) and redirect back to wherever you started.