| Workspace Settings | Workspace identity and controls | Name/logo/default currency/config |
| Team Members | Access lifecycle | Invite, role changes, removal |
| API Keys | Automation credentials | Create scoped keys, rotate keys |
| Publishable Keys | Public-tracking credentials | Manage browser/client-safe key lifecycle |
| API Apps | OAuth client credentials | Manage redirect URIs, scopes, secret rotation |
| Embeds | External widget publishing | Generate and copy embed snippets |
| Custom Domains | Brand and routing domain layer | Add, validate, remove custom domains |
| Webhooks | Event subscription delivery | Create/test/toggle and inspect deliveries |
| Tracking | Client tracking controls | Manage publishable keys and tracking safety |
| Limits and retention | Governance boundaries | Review plan limits and retention behavior |
| SAML/SCIM (Enterprise) | Identity federation/provisioning | Configure SSO and provisioning automation |
| Account Security | Personal account hardening | Password, provider links, session hygiene |