Team & roles

Teammates sign in with GitHub (or SSO) and only after you invite them. Access keys for CI and MCP get a role too.

Role	Can
Owner	Everything, including billing and other owners
Admin	Everything except managing owners
Developer	View, publish, change and roll back releases, maintenance mode
Viewer	View only

npx healkite members add octocat --role developer
npx healkite members role octocat viewer
npx healkite access-keys create "GitHub Actions" --role developer

Or Team and API & MCP in the dashboard. Give CI the Developer role and read-only tools the Viewer role.