Organization Management

General information

• Organization name — shown across the dashboard and in invitations. Required.
• Organization slug — optional URL-friendly identifier (letters, numbers, -, ., _, ~). If you do not set one, a slug is derived from your email domain when the organization is created.
• Logo URL — a link to an image, used in authentication flows.

Save changes at the bottom applies them.

Team members

Current Team Members lists each member's name, email, role and join date; your own row is marked You.

Inviting

1. Click Invite Team Member.
2. Enter the email address.
3. Send the invitation.

Pending Invitations shows each invitation's email, status and date sent, and lets you cancel one. Statuses are Pending, Accepted and Cancelled.

Team size is a plan limit: Pro includes up to 10 members. See Billing.

Authentication policies

The page exposes Stytch policy controls:

• SSO JIT provisioning — whether SSO connections may create members automatically
• Default SSO connection ID — which connection to use when several are active
• Auth methods policy — which sign-in methods are allowed
• MFA methods policy — which second factors are allowed
• MFA policy — whether MFA is optional or required for everyone
• Claimed email domains — domains you have verified, one per line

Note (September 2026). Allowed authentication methods, Allowed MFA methods and MFA policy are all editable here. SSO just-in-time provisioning is not — the section is hidden until the feature is wired up, so configure SSO provisioning in Stytch or ask support.

SSO itself is a Team-plan feature.

Roles

Deutero currently distinguishes the organization's own members from everyone else; there is no per-project role assignment in the dashboard. Every member of an organization can see its projects and studies, and API keys are organization-scoped — a key issued by one member acts for the whole organization.

With MCP

No organization tools. Notably, list_projects and every other tool act within the caller's organization, which is how an API key's blast radius is defined.

Troubleshooting

• "Forbidden" on /admin pages — /admin/organization and /admin/members are restricted admin routes and return 403 even for the organization's creator. The page you want is /organization/settings.
• Changes not saving — the organization name cannot be empty, and the slug must match [A-Za-z0-9\-._~]+.
• Invitation not received — check spam, confirm the address, and check it was not cancelled.

Last updated: September 2026