Projects now have four roles:

Owner: can transfer ownership to another member from the Members page.
Admin: can manage project settings, members, and encryption.
Editor: can view, reveal, and modify API keys.
Viewer: has read-only access to keys.

Everyone already on a project was migrated to the Editor role. Change a member's role from the role submenu on the Members page.

#Server-side enforcement

All key mutation routes, including bulk imports, and MCP key tools reject writes from Viewers with 403 Forbidden. Remote MCP tokens are also checked against active project membership before every key read, reveal, or write.

Learn more in the Projects & RBAC guide.