Security
安全与访问Northwind Labs access control, API keys and audit trail.
SSO enforced
API keys
4
Roles
4
Team members
10
Audit events
4
API keys
Connector credentials stored in the vault (masked)
| Key | Scopes | Owner | Last used |
|---|---|---|---|
Stripe live sync sk_live_••••a91f | revenue:readwebhooks:write | Alex Chen | 7d ago |
GitHub deploy bot ghp_••••c3e2 | repo:readactions:write | Marco Silva | 7d ago |
PostHog ingest phc_••••91bb | analytics:write | Priya Raman | 6d ago |
OpenAI gateway sk-proj-••••771d | llm:invoke | Yuki Tanaka | 6d ago |
Roles
Least-privilege matrix
| Role | Members | Access |
|---|---|---|
| Owner | Alex Chen | Full OS + billing + keys |
| Admin | Priya Raman, Marco Silva | All modules except key delete |
| Operator | Yuki Tanaka, Sofia Rossi, Daniel Okafor, Emma Laurent | Read/write ops + engineering |
| Viewer | Tom Becker, Lena Hoffmann, Nina Petrova | Read-only dashboards |
Audit log
Sensitive actions
| Actor | Action | When |
|---|---|---|
| Alex Chen | Rotated OpenAI gateway key | 7d ago |
| Priya Raman | Invited Emma Laurent as Viewer | 8d ago |
| Marco Silva | Enabled SSO enforcement for operators | 9d ago |
| system | Failed login lockout cleared for support@northwindlabs.io | 10d ago |