People and roles
Invite someone by email. They join your organisation when they accept.
Viewers deliberately can’t create things that spend money — assigning an
outcome, pointing a webhook somewhere, or adding a provider
key.
The same person in two organisations has separate access in each. Switching
organisations doesn’t carry permissions across.
Secrets Vault
The Secrets Vault holds secrets your tools need — API keys for your own systems, mostly. Reference one in a tool as{{secret.name}}.
Values are encrypted and never readable again, by anyone, including you. You see
the name and a hint; to change a value, you replace it.
Secrets resolve only in requests your tools send. They can’t reach anything the
caller hears.
Credentials for services Qall calls — your OpenAI or ElevenLabs account, your
storage bucket — go in Integrations instead.