Cockpit app

Organization — people, access and cost

Manage people and invitations, API tokens and the cost of an organization from Orkestia Cockpit — roles, one-time secrets, seats, usage, and where payment happens

Organization is the last item of the sidebar. It is one page with three tabs, People, Access and Cost, for the organization the window is in. The toolbar title is the organization's name, with your standing next to it (You're an admin, You're the owner, You're a member). Read again refreshes every part.

Each part reads on its own and says why when it cannot (Couldn't read this: … with Try again). Changes need an owner or admin and ask first when they cannot be undone. For the concepts, see Identity and multi-tenancy, Billing and seats and Settings.

Switching organization (the menu at the top of the sidebar) changes this page, and everything else in the app, to that organization. The server keeps one active organization per person, so switching here also switches the web apps.

Roles

Role	What it can do
Owner	Runs the organization. Owners cannot be removed here, and the last owner cannot stop being one
Admin	Manages people, access, connections and billing
Member	Uses what the organization has set up

Owners and admins can manage; the app mirrors the web console's rule. A member sees the controls as read-only, with a line saying who can use them.

People

Part	Behavior
People	Each member, owners first. A tag You marks you. Roles: a selector (Member, Admin, Owner) with a tooltip on what the role can do; others see the role as a tag. A remove button for members. Right-click: Copy Email. The hint reads N of M seats used. Each person takes one seat
Invite form	name@company.com, a role (Member or Admin; owners are made, not invited) and send
Invitations	People invited who have not joined, with role, expires (or expired) and who invited them

What each change does:

Change	Confirmation and effect
Change a role	A toast says is now with an undo. Making someone an owner asks first
Remove a member	Remove ? They lose access right away: its chats, workflows, apps and connections. Their seat is freed. They can be invited again later
Resend an invitation	Sends the email again
Copy the invitation link	Invitation link copied, to send it yourself
Cancel an invitation	Cancel this invitation? The person will not be able to join with it

The invite form is not shown to members; they see Only owners and admins can invite people.

Access

AI tools on this computer

Claude Code, Claude Desktop, Cursor, Codex and VS Code can use Orkestia through this app, as you, with one click each: no token to copy, no extra sign-in. Connect AI tools… opens Settings on the AI tools pane. See AI tools and MCP.

Connect over the internet

For hosted tools, or tools on another computer. One address for every tool, https://mcp.orkestia.dev/mcp. It acts in the organization you sign in with and can only do what you can. Copy address; Copy a first prompt copies a message that checks the connection safely (it asks the assistant to call whoami, list namespaces and workflow types, and wait for your ok before starting anything).

Tool	How
Claude and Claude Code	Signs in with your Orkestia account. Settings → Connectors → Add custom connector
Cursor	Signs in with your Orkestia account. Settings → MCP → Add new server
Lovable	Signs in with your Orkestia account. Settings → Connectors → Custom → Add server
Anything else	Uses an API token from below. Point it at the address and send `Authorization: Bearer <token>`

The same flow is documented in Connect an AI assistant.

Your API tokens

For scripts, CI and tools that cannot sign in. Each token acts as you, in this organization only. Tokens are listed with active ones first, then by creation date; expired ones are marked.

Action	Behavior
New token	What it's for (e.g. CI deploys), an expiry (30 days, 90 days, 1 year, Never)
Rename	Changes the name only
Replace	The token gets a new value and the current one stops working right away. Update every place that uses it. Disabled for an expired token
Revoke	Revoke this token? Anything using it stops working right away. This cannot be undone

A token's value is shown once, in a sheet (Token "" created, or New value for "" after a replace) with Copy and I've saved it. Copy it first: it cannot be shown again, and anyone holding it can act as you. Tokens named Orkestia Cockpit runner · … are the ones this app made for a computer's local runner; replacing or revoking one stops that runner (the confirmation says so).

Cost

The page reads the organization's billing summary and usage. Paying happens on Stripe's own pages: the app opens them in your browser and never takes card details.

Plan and next bill

Tile	Shows
Plan	The plan name, its status (Active or the status as is) and renews (or ends when it is set to cancel), or No subscription
Next bill	The total, and when it is charged. When credits apply it also shows the subtotal before credits. Nothing due when there is no upcoming invoice
Observability	The Lumen plan, how many days it keeps data and its monthly amount, when the organization has one. See Lumen in Cockpit
Run history kept	How long workflow run history is kept and what that costs (included when free)

What's on the next bill expands to the invoice lines. Payment and invoices (top right of this block) opens the Stripe billing portal for payment methods, invoices and receipts. It is available when the platform offers the portal, and only to owners and admins; for anyone else the button explains that.

The Observability tile shows what the organization's billing says about Lumen. The Lumen plan an organization is actually on is read from Lumen itself, on Usage & API keys in Lumen mode. The two can disagree while billing and the Lumen plan row are not in step; Lumen mode only shows a billed amount next to its plan when both agree.

Seats and limits

Each line is what you use against what you pay for: a label, a bar, used of quantity (and how many are included when that differs). A note such as Counted, not billed yet appears when the platform measures something it does not bill. Owners and admins see Add on a seat line that can be bought. It asks how many (1 to 500), then Continue to payment opens a Stripe Checkout page in your browser, where Stripe shows the price and asks you to confirm before charging. After paying, press Read again to see the new seats.

Usage this period

The billing period, Workflow runs over the days measured with a bar per day, and Run history stored (the latest measurement). numbers may be out of date appears when the platform says the measurement is stale. Platform notices about what is measured but not billed are shown in plain words. Registry usage is on Registry, under Your Orkestia bill, and on Orkestia Registry.

Changing the observability plan or how long run history is kept is done in the Cost Center on the web (open the Cost Center).

Runners and Connections

The Run group of Orkestia Cockpit — runner groups and their instances, and the services the organization is connected to

AI tools and MCP

Let Claude Code, Claude Desktop, Cursor, Codex and VS Code use Orkestia through Orkestia Cockpit — the local connector, the first-use question, what the ten tools can and cannot do, revoking, and orkestia-cockpit:// links