View MSP account details, security evidence and platform health. This is not the separate customer MSP workspace. Account extensions, subscriptions and editing are not yet available in this owner view.
Request a one-time link to the authorized operator mailbox.
Owner identities & recovery
The primary owner is the only enabled operator. Emergency identities are reserved but cannot sign in until email ownership, strong MFA and primary-owner approval are verified. Support roles have no active access.
Loading operator roster…
Verification usage & support history
Distinct employee email accounts consume slots once per client and provider. Repeat checks are permitted. Legacy attempt totals are retained separately. Receipt IDs are auditable; identities are pseudonymized.
Loading usage…
Owner AI / MCP keys
Operator only. Create or rotate a 30-day, limited cys_test_ credential for your own ChatGPT/MCP testing. MSPs cannot create platform credentials; they reauthorize their own clients in the MSP Connections tab.
Checking owner credentials...
Copy the key now; it cannot be displayed again.
Requires a fresh operator email Step-up above. Only your owner test keys are rotated; paid customer entitlements are not affected.
Open HIGH/CRITICAL incidents requiring operator review. Acknowledge and resolve require fresh step-up confirmation.
Security event ledger
Security controls
MSP accounts — read-only detail
Open an MSP to inspect its status, expiry, child organizations and provider connections. Editing and manual extensions are not enabled here. Use the customer MSP workspace separately for authorized organization-level assessments.
Operator SOPs and linked How-Tos
These are investigation instructions, not automatic fixes. Acknowledge starts review; Resolve records an investigated outcome. Neither action repairs a connector.
SOP: OAuth authorization failure
CYS rejected a provider authorization response because an integrity check failed. This does not itself prove account compromise.
How-To
Open event history and check time and event ID against known tests.
Locate the affected MSP from MSP accounts; verify which provider was involved.
If needed, have that authorized customer open their own MSP workspace and reauthorize the selected client connection.
Rerun the relevant read-only assessment; only resolve with documented evidence.
SOP: Webhook authentication rejected
An integration request was rejected because authentication was not accepted. Causes include intentional QA, expired entitlements, outdated tokens or unexpected callers.
How-To
Match the event and connector to the event ledger.
Review active, suspended and expired MSP trials. These are evaluation accounts, not paid subscriptions. Creating a grant does not send a welcome email or change Stripe.
Security: creating or changing a trial requires fresh operator email step-up (use Step-up in the Security Alerts area). Adjustments record an owner explanation in the security event ledger.
Loading trials…
Create a free MSP trial — owner authorization required