24. Your Account

Alex wants to set a display name and update their password.

The Account page (accessible from the main sidebar) manages your platform account — the one you use to sign into the Eurobase console itself.

Profile information

  • Email — your login email (read-only)
  • Display name — set a friendly name that appears in the console header
  • Member since — your account creation date

Change password

Enter your current password, then your new password twice. The new password must be at least 8 characters.

Personal Access Tokens

Long-lived bearer tokens for tooling that needs to act as you outside the browser — the MCP server, the CLI, CI pipelines, scripts. Mint and revoke them in the Personal Access Tokens card on the Account page.

Creating a token: click + New token, give it a memorable name (e.g. my laptop, ci-prod), optionally set an expiry date, and click Create. The plaintext token (e.g. eb_pat_205d71172180a3ca3ea0e26f07156429) appears in an amber banner once. Copy it immediately into a password manager or your shell rc — it is not retrievable afterwards. The console only stores a SHA-256 hash.

What a PAT can do: read and write any project you own or are a member of, via the SDK, the platform API, or the MCP server. It authenticates as you across every project, with the same RLS and role checks the rest of the platform enforces.

What a PAT can't do:

  • Reach the platform admin surface (allowlist management, cross-tenant project list). PATs never carry the is_superadmin claim, even when minted by a superadmin.
  • Mint other PATs — only an authenticated browser session can do that. Limits the blast radius of a leaked token.
  • Change your password or delete your account.

Revoking: click Revoke next to any token. Revocation is immediate — the next request using that token returns 401. There's no grace period.

Treat PATs like passwords. If a token leaks (commit, screenshot, screen-share), revoke and rotate it. Tokens listed on this page show their last-used timestamp so you can spot inactive ones to clean up.

Delete account

At the bottom of the page, you can permanently delete your platform account. You'll need to type your email address to confirm. This also deletes all projects owned by the account.

Account deletion is permanent. All projects, databases, files, and user data under this account will be irreversibly destroyed.