Console
Access
Identities, roles, API keys.
Answers: identities, roles, API keys
Governing rule
Granting an application scope to an operator is impossible in the UI — taught by absence, not refusal.
What this panel shows
Two planes
Operators and application users never mix.
Key creation
Value shown once; attenuation to creator scopes only.
Revocation
Blast radius plus honest JWT validity delay.
Hygiene
Unused keys, never-signed-in operators, expired invites.
Catalog
Dev
✓
Prod
✓ (admin)