Manage accounts and vaults

Run these on the server's machine, with the server's environment: in Docker, prefix each with docker compose exec vault; on Kubernetes, with kubectl exec deploy/notes-vault-mcp --. Accounts and vaults explains what they act on.

Let people in

New accounts are by invitation. accounts invite lets an address in the first time it signs in with a verified email:

mindin accounts invite ann@example.com

VAULT_REGISTRATION=open lets anyone with a verified email create an account.

Suspend, activate, delete

mindin accounts list
mindin accounts suspend ann@example.com     # every key and token stops at once
mindin accounts activate ann@example.com
mindin accounts delete ann@example.com --yes

accounts delete destroys every vault's key first, then their files, indexes, keys, connections and the account's ways in. It is refused while the account owns a shared vault that has other members; hand each one over or delete it first. People can also delete their own account on the Account page.

Give an account more vaults

mindin accounts vaults ann@example.com                      # slug, name, notes, files, keys
mindin accounts add-vault ann@example.com "Workshop" --slug workshop --preset para
mindin accounts rename-vault ann@example.com workshop --name "Shed" --slug shed

A slug is one word of lowercase letters and digits, starting with a letter; without --slug, it is made from the name. --preset picks the vault's layout. People make their own vaults on the Vaults page too.

Share a vault

mindin accounts add-vault ann@example.com "Orchard club" --slug orchard --shared
mindin accounts add-member ann@example.com orchard bo@example.com
mindin accounts members ann@example.com orchard              # owner, members, invitations
mindin accounts remove-member ann@example.com orchard bo@example.com

With SMTP set up, add-member sends the address one email with a sign-in link. remove-member withdraws an invitation, or removes a member and revokes their keys to the vault. The owner does the same on the vault's page. See Shared vaults.