Create a Team workspace

Team workspaces provide organization-level governance for AI agent security.

Create a workspace

1. Open the dashboard
2. Choose Create Team Workspace
3. Complete Team billing if required
4. Invite members from Members using their email address

Team workspaces add GitHub integration, repository scanning, policy history, audit logs, and organization API keys.

Invite and join

Invitations belong to the recipient's verified email address and carry the role chosen by the workspace administrator.

• Company SSO: the invitation email opens the workspace's company sign-in page with the invited email displayed. Choose that account at the identity provider. Successful company sign-in automatically accepts a valid pending invitation. You can also use company sign-in from the login page when your work domain is configured for discovery, or use the workspace sign-in URL supplied by its owner.
• Regular accounts: the invitation email opens login. Sign in or create an account with the invited email, verify it, then open Profile → Pending invitations to accept or reject.
• Existing personal accounts using SSO for the first time: sign in to the personal account first, then continue through the workspace's company sign-in page to connect the company identity. Matching email addresses alone do not merge accounts.

Administrators can resend or revoke pending invitations from Members. Resending renews the invitation and replaces its fallback invitation link. Existing invitation links remain supported during this transition. Rejected, revoked, and expired invitations cannot grant access; ask the administrator for a new invitation if needed.

Only a successful sign-in through that workspace's configured provider can automatically join an SSO invitee. Typing an email, following a link, or having the same company domain does not grant membership. Seat billing must succeed before a new member receives access.