The Account page (accessible from the main sidebar) manages your platform account — the one you use to sign into the Eurobase console itself.

Profile information

• Email — your login email (read-only)
• Display name — set a friendly name that appears in the console header
• Member since — your account creation date

Change password

Enter your current password, then your new password twice. The new password must be at least 8 characters.

Passkeys & multi-factor authentication

Protect your console account with a passkey — Face ID, Touch ID, Windows Hello, your phone, or a hardware security key. Passkeys are available on every plan, Free included. Add one in the Passkeys & multi-factor authentication card on the Account page; you can add up to ten (for example laptop + phone + a YubiKey) and give each a name.

• MFA turns on automatically as soon as you have one passkey. From then on your password alone no longer signs you in: after the password, the console asks for your passkey.
• Or skip the password entirely: click Sign in with a passkey on the login page. A passkey unlocked with your fingerprint, face or device PIN already counts as two factors.
• Removing your last passkey turns MFA off again. Adding or removing a passkey asks for your current password unless you signed in with your password or a passkey within the last 10 minutes (a fresh SSO sign-in always needs the password here).
• Lost every passkey? Use Forgot password. The emailed reset removes all passkeys on the account (MFA off) and sends you a security notice — sign in and add a new passkey straight away. Keep a second passkey registered so you rarely need this.
• SSO sign-in is unchanged. If you sign in through your organization's SSO, your identity provider handles MFA. Organizations that require SSO still require it — a passkey session reaches your personal projects but not that organization's projects.

Personal Access Tokens can't add or remove passkeys, and every passkey sign-in, failed attempt, registration and removal is recorded in the platform audit log.

Personal Access Tokens

Long-lived bearer tokens for tooling that needs to act as you outside the browser — the MCP server, the CLI, CI pipelines, scripts. Mint and revoke them in the Personal Access Tokens card on the Account page.

Creating a token: click + New token, give it a memorable name (e.g. lovable, ci-prod), pick the project and the access (Read-only, Developer or Admin — not more than your own role there), and click Create. Tokens don't expire; revoke them when you no longer need them. The plaintext token (e.g. eb_ptk_205d71172180a3ca3ea0e26f07156429) appears in an amber banner once. Copy it immediately into a password manager or your shell rc — it is not retrievable afterwards. The console only stores a SHA-256 hash.

What a PAT can do: in its one project, exactly what a member with its access level can do in the console, via the platform API, the CLI or the MCP server. If your own role in the project is lowered, the token's is too; if you leave the project, the token stops working there. Older tokens created before project tokens (eb_pat_, shown as All projects (legacy)) still reach every project you're in — replace them with project tokens.

To read the token’s project details (name, plan, status, API URL, auth settings), call GET /v1/tenants: a project token gets a list with just its own project. There’s no GET /platform/projects/<id> (404).

What a PAT can't do:

• Reach another project, your organizations, billing or account settings.
• Reach the platform admin surface (allowlist management, cross-tenant project list). PATs never carry the is_superadmin claim, even when minted by a superadmin.
• Mint other PATs — only an authenticated browser session can do that. Limits the blast radius of a leaked token.
• Change your password or delete your account.

Revoking: click Revoke next to any token. Revocation is immediate — the next request using that token returns 401. There's no grace period.

Delete account

At the bottom of the page, you can permanently delete your platform account. You'll need to type your email address to confirm. This also deletes all projects owned by the account.