Accounts & organizations

Jollop is multi-tenant: you sign in, your apps are yours, and organizations let a team share.

Signing in

Sign in with email and password, or passwordless with an emailed code. From the CLI, jollop login runs the same flow and saves a durable API key so subsequent commands are authenticated as you. In the browser, an account chip shows who you are and lets you sign out.

Self-serve sign-up may be disabled on a given deployment. When it is, existing accounts still sign in normally, and new accounts are provisioned by the operator.

What “yours” means

When you deploy, the app is stamped with your ownership. You see and manage only your own apps; other users cannot see or touch them. The operator has full access across the platform.

Organizations

Create an organization and invite teammates to collaborate:

• Roles: owner, admin, member. Any member can view and run org apps; admins and owners can manage them (edit the run contract, change sharing, destroy) and manage membership.
• Active scope: a switcher lets you work in your Personal scope or in one of your orgs. New deploys and your app list follow the active scope.
• Invites: admins and owners invite by email; the invitee accepts to join.

API keys

jollop login mints a user API key stored in ~/.config/smallcloud/env. Anything that speaks the API, the CLI, or the MCP server, authenticates as you simply by holding that key, and is subject to exactly the same access rules as the web UI.