Site members, workspace roles, and API tokens - who can read and write what.
Secure httpOnly-cookie sessions for your site's members.
Invite teammates and control admin permissions.
cs_ tokens for the MCP server, delivery API and SDK.