# Team Members

> Invite team members to a workspace, manage roles, per-member tokens, and revoke access.

Workspaces support team collaboration. Invite members by email, and each person gets their own token with independent analytics and rate limits. Remove access instantly when someone leaves.

---

## How Team Access Works

```mermaid
flowchart TD
    Owner["Workspace Owner"] -->|"invites"| M1["Alice\n(per-member token)"]
    Owner -->|"invites"| M2["Bob\n(per-member token)"]
    Owner -->|"invites"| M3["Charlie\n(per-member token)"]
    M1 --> GW["Workspace Gateway"]
    M2 --> GW
    M3 --> GW

    style Owner fill:#3b82f6,stroke:#2563eb,color:#fff
    style M1 fill:#1e293b,stroke:#6b7280,color:#fff
    style M2 fill:#1e293b,stroke:#6b7280,color:#fff
    style M3 fill:#1e293b,stroke:#6b7280,color:#fff
    style GW fill:#3b82f6,stroke:#2563eb,color:#fff
```

Each team member receives their own workspace token. This means:

- **Independent rate limits** -- one member's heavy usage does not affect others
- **Per-member analytics** -- see exactly who is calling which tools and how often
- **Granular revocation** -- remove one person's access without disrupting the rest of the team
- **Individual audit trail** -- every tool call is attributed to a specific member

---

## Invite a Member

1. **Open Your Workspace**

   Navigate to **Workspaces** in the Admin dashboard and select the workspace.

1. **Go to Members**

   Click the **Members** tab. You will see the current list of members and their status.

1. **Invite by Email**

   Click **Invite Member** and enter the person's email address. They will receive an invitation email with instructions to join.

1. **Member Accepts**

   Once the member accepts the invitation, they receive a personal workspace token and can connect their LLM client.

### CLI

```bash
aerostack workspace member invite my-workspace alice@example.com
```

  The invited person must have an Aerostack account. If they do not have one, the invitation email will prompt them to sign up first.

---

## Per-Member Tokens

When a member joins a workspace, they get their own token (`mwt_` prefix). This token:

- Is unique to that member in that workspace
- Has its own rate limit (120 requests/minute)
- Is tracked independently in analytics
- Can be revoked without affecting other members

Members use their token exactly like any other workspace token -- configure it in Claude Desktop, Cursor, or any MCP client using the [gateway URL](/workspaces/gateway-url).

---

## View Members

### Dashboard

Open the workspace and click the **Members** tab. Each member shows:

- Email address
- Join date
- Last active timestamp
- Token status (active, revoked)
- Total tool calls

### CLI

```bash
aerostack workspace member list my-workspace
```

---

## Remove a Member

Removing a member immediately revokes their token. They lose access to the workspace and all its tools.

### Dashboard

Open the workspace, go to **Members**, find the member, and click **Remove**.

### CLI

```bash
aerostack workspace member remove my-workspace alice@example.com
```

  Removal is immediate. The member's token stops working instantly with no cache delay. Any LLM clients they have connected will lose tool access.

---

## Seat Limits

The number of members per workspace depends on your plan:

| Plan | Members per Workspace |
|------|----------------------|
| Free | 1 (owner only) |
| Starter | 5 |
| Pro | 20 |
| Business | 100 |
| Enterprise | Unlimited |

When you reach the seat limit, you need to remove an existing member or upgrade your plan to invite more.

---

## Use Cases

### Engineering Team

Give each engineer their own connection to the team's shared tools. Everyone gets access to GitHub, Linear, and CI/CD tools, but each person has their own token and analytics.

### Client Collaboration

Invite a client to a workspace with only the tools they need. When the project ends, remove their access in one click.

### Bot and Human Side-by-Side

A workspace can have both human members (connecting via Claude Desktop or Cursor) and bot tokens (connecting via Aerostack Bots). The analytics dashboard shows usage for all of them, letting you compare human and automated tool usage.

### Onboarding and Offboarding

When a new team member joins, invite them to the relevant workspaces. When they leave, remove them from all workspaces. Their tokens are revoked instantly and their access is fully auditable.