Skip to main content

Administer · Settings

Settings

Where each setting lives, and which ones matter for your workspace.

Open Settings from your user menu in the bottom-left of the app. Most pages apply to the whole workspace; a few, marked below, are personal to you.

Connectors​

Give the chat agent tools from other services. Add an MCP server once and it is available in every new chat, with each tool switched on or off individually. See Add MCP servers to chat.

API Keys​

Create, view, and delete the keys that let AI tools such as Claude, Claude Code, and Cursor reach your data. A key is shown once, at creation, and its permissions default to read and query. See API keys and permissions for the scope table, header formats, rotation, and rate limits.

MCP Connect​

Generates ready-to-paste configuration for the tool you use, with the right endpoint and an X-API-Key header already filled in. Faster and less error-prone than typing it by hand. The same setup, explained step by step, is on the Claude, Claude Code, and other tools pages.

GitHub​

Install the SignalPilot GitHub App, see which installations and repositories the workspace can reach, and link a repository to a project. Needed for private dbt project repositories and private eval sets. See GitHub.

Team​

Members, roles, and invitations, plus:

  • Email domains: verify a domain you own, then choose how people from it join: automatic invitation, automatic suggestion, or neither.
  • SSO (SAML/OIDC): Team and Enterprise plans. The ACS URL and metadata your identity provider needs are shown here.
  • Danger zone: delete a domain, or delete the team.

Billing and usage​

Billing manages the plan. Usage shows request volume against your rate limits, a per-key breakdown, and trends over time. Plan quotas are listed under plan limits.

Account security​

Personal to you, not the workspace:

  • Authenticator app (TOTP): enable or disable, with QR enrollment.
  • Backup codes: generate and regenerate.
  • Active sessions: see them, and sign out the ones you do not recognise.

BYOK​

Bring your own encryption key for credentials at rest. See BYOK.

Local / self-hosted gateway defaults​

Self-hosted deployments only. In local mode the sidebar has its own Settings section. It sets the gateway the web app talks to and the default guardrails applied when a caller does not specify their own:

SettingMeaning
Gateway API keyThe key the browser uses against the gateway.
Default row limitLIMIT injected into SELECT when the caller sets none.
Max rows per queryHard ceiling; a caller asking for more is capped.
Default timeoutSeconds before a query is abandoned.
Default budget (USD)Starting spend cap for a session.
Sandbox manager tokenBearer token for a remote sandbox manager.

Blocked tables and PII column rules are per connection rather than global. See Schema explorer.