Departments, session timeout, API keys, and service accounts
Departments
Settings → Departments
Organize your team into departments (Sales, Finance, Operations…). Click Add Department to create one. A member’s department appears in the Members list, and fields such as User filters can use it.
Session Timeout
Settings → Session Timeout
Turn on Sign out inactive members to sign people out automatically after a period of inactivity.
- It applies to everyone in the organization, on every device.
- Mouse, keyboard, or touch input in any ERP•AI tab counts as activity.
- Members see a warning 1 minute before they’re signed out and can choose to stay signed in.
Click Save changes.
API Keys
Settings → API Keys
API keys are scoped credentials that let scripts, integrations, and AI agents use ERP•AI’s API.
Key types (tabs)
| Type | Use it for |
|---|---|
| Personal | Your own scripts and AI agents. The key acts with your permissions. |
| Organization | Server-to-server integrations owned by the organization, held by a service account |
| Integrations | Third-party connectors |
| Publishable | Keys that are safe to use in public, client-side apps with limited access |
The list shows each Key with its name and scopes (for example records:read, records:write, records:delete, tables:read, tables:write, schema:read, apps:read), Expires, Last used, and Created by.
Create a key
- Click New API Key.
- Give it a name, choose its scopes and the apps it can access, and set an expiry.
- Copy the key immediately. It’s shown only once.
Manage keys
Depending on your permissions, you can edit, rotate (replace with a new secret), or revoke (disable) your own keys or any key, and read the key audit log and usage stats.

Service Accounts
Settings → Service Accounts
Service accounts are non-human identities owned by the organization. Each one can hold one or more organization API keys, so integrations keep working when an employee leaves.
- Click New Service Account and name it (for example
ERP-to-Warehouse Sync). - Create an Organization API key and assign it to the service account.