auth_sso
Identity, SSO & PKCE
Host-only sessions, OAuth2/OIDC (Google, GitHub, Entra ID), WebAuthn Passkeys, TOTP MFA, and RFC 8628 Device Pairing.
billing_subscriptions
Plans & Multi-Gateway Billing
Multi-provider orchestration (Stripe, Polar.sh MoR, Paddle, Lemon Squeezy, PayPal, Manual) and Plan -> Override -> Credit resolution.
usage_quotas
3-Phase AI Quotas & Credits
Atomic 3-phase metering (reserve / finalize / release) for LLM calls, BoxFleet concurrent sandboxes, and SAST scans.
payouts_treasury
Real-Money Payouts & Treasury
Automated settlement to your bank accounts across 7 rails (Stripe Connect, Wise, Interac, SEPA, ACH, PayPal) in 48h or 30 min.
team_tenancy
Organizations & Projects
Strict multi-tenant isolation (Organization -> Project -> Environment), signed invites, and granular RBAC.
notifications
Alert & Webhook Channels
HMAC-SHA256 signed webhooks, transactional emails via Resend/Postmark, Slack, and Microsoft Teams alerts.
audit_compliance
SHA-256 Chained Audit
Immutable audit ledger with verifiable cryptographic hash chaining for SOC2 and ISO27001 compliance.
agent_supervision
Supervised AI Agents
Zero-destruction Agentic-First mode allowing agents and Universal Surface Leases (Web, CLI, MicroVM) to operate safely.