Skip to content

Console

Vendor work that is not the check API lives at e10s.io.

Session

Your login persists across tabs in the same browser. A new tab on e10s.io stays signed in; you do not go through OIDC again.

Create a member key

Service accounts → Create key on that account. The modal is name, seven scope checkboxes, and Full access.

Control What you get
Default check only — GET entitlements + POST check
Checkboxes check, catalog:read, catalog:write, subscribers:read, subscribers:write, org:read, org:write. Write does not include read.
Full access Omits scopes (unrestricted). Explicit; not the default.
None checked Sends [] — grants nothing

The default key can check, not catalog:write. Copy the plaintext once. Details: Authentication.

Invites

Members → copy invite link.

The link is {origin}/login?invite=<token> (for production, https://e10s.io/login?invite=…). It is a shareable join token, not bound to an email. Anyone who opens it and signs in redeems it.

Redeem happens after login. The token is one-shot. It is not an Auth /authorize?invite= parameter.

Next