> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mindfort.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings and Billing

> Learn how to manage MindFort workspace settings — profile, team access, billing and credits, notifications, integrations, WAF, and API keys.

## Settings Tabs

### Profile

Use **Settings → Profile** to update personal account and security settings.

### Team

Use **Settings → Team** to manage members and organization access.

### Billing

Use **Settings → Billing** to view credits and target balances, manage your subscription and payment method, purchase additional credits or target capacity, and review invoices. Admin access is required.

Enterprise plans include custom assessment credit pricing, SSO/SAML, priority assessments, and dedicated support.

Billing is also accessible directly from the sidebar for quick access.

### Notifications

Use **Settings → Notifications** to control delivery preferences.

### WAF Configuration

Use **Settings → WAF Configuration** to copy current allowlist IPs.

### Integrations

Use **Settings → Integrations** to connect or disconnect supported tools. Connected integrations enable additional actions throughout the platform, such as creating linked issues from findings, requesting patches, or launching Agents from Slack. An upgraded plan and permission to manage integrations are required to connect integrations. See [Integrations](/guides/integrations) for details.

### Features

**Settings > Features** shows the organization's automatic retest settings. These settings control validation after finding resolution or patch merges; see [Retesting](/guides/retesting#automatic-retest-status) for how their results affect finding status. Owners, admins, and members with permission to manage integrations can change these settings.

### Status

Use **Settings → Status** for current platform health.

### API Keys

Use **Settings → API Keys** to create and manage keys for API usage. This requires permission to manage API keys.

API keys are organization-scoped. Rotate keys regularly and remove keys that are no longer used by CI/CD systems or approved tools.

If Billing or API Keys shows an access-denied message, use the Settings tabs to return to a page you can access. Ask an organization owner or admin for the required access.

## Setup Checklist for Admins

1. Confirm billing and plan state.
2. Invite required team members.
3. Configure integrations.
4. Configure notification preferences.
5. Share WAF allowlist with infrastructure owners.
6. Create API keys only for the systems that need them.

## Credits and usage-based billing

The assessment form displays the cost before you start: Balanced uses 200 credits, Deep uses 400, and Ultra uses 800. A finding retest uses one credit.

Starter and Pro customers can purchase additional credits and enable usage-based billing. When enabled, assessments can continue after prepaid credits are exhausted; usage beyond the prepaid balance is billed. Review the displayed rates and billing period before enabling it.

Included plan credits may reset each billing period. Check **Billing** for your current balance, subscription, usage, and invoices.

## Feature access

Agents, retesting, reporting, and connecting integrations require an upgraded plan. Organization features can impose additional access requirements; for example, Security Reviewer appears only when enabled for your organization. Scheduled assessments are available on all plans, subject to the target's readiness and available credits.

## Auditor access

Members whose only role is auditor have read-only access to permitted security views, including Overview, Assessments, Findings, Target Inventory, and Coverage. They cannot start runs or change findings. Filesystem, Agents, Analytics, and administrative actions are not available to members with only the auditor role.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.