> ## Documentation Index
> Fetch the complete documentation index at: https://docs.worksong.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and permissions

> What protects your data and what you control.

## In Worksong

* **Approvals** pause consequential actions. See [Approvals](/worksong/approvals).
* **Secrets** are used by Agents but never shown to them. See [Secrets](/worksong/secrets).
* **Credentials** you connect are never returned by the API. Browser pages do not receive server credentials.
* **Spend limits** per Agent and per account.
* **Audit** lists what Agents did and what you approved.

## In Work

* **Tenant isolation:** every row belongs to one organization and the database enforces it.
* **Authority, gates and limits** decide what a Member may do. An API token is a credential of an existing Member.
* **Audit** is append-only and written before a change happens.
* **Public forms** write through a restricted intake member.

This page does not describe internal infrastructure. To report a security issue, contact your workspace owner.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.