Team and activity

Work on the same servers with your team and see who changed what

The short version: invite your team, everyone deploys to the same servers, and the activity shows who did what. Teams are free.

Your workspace

Everything you add to moin lives in a workspace: servers, apps, the bucket, registry logins, the Cloudflare token, the Tailscale key and the GitHub App. Everyone in the workspace sees and works on all of it. The plan belongs to the workspace too, so one subscription covers the whole team.

You name your first workspace when you sign up. Rename it later under Rename the workspace.

Create a workspace

Makes one more workspace, for example one per client. On hosted moin each workspace has its own plan.

the workspace switcher at the top of the sidebar, New workspace

POST /api/v1/workspaces

The new workspace starts empty. Your API tokens stay with their own workspace: make a token in the new one for the CLI.

Roles

	Member	Admin	Owner
Deploy, roll back, edit data, restore, servers, domains, env	✓	✓	✓
See the activity	✓	✓	✓
Invite people, rename the workspace		✓	✓
Make someone a member or an admin, remove members and admins		✓	✓
Make someone an owner, remove an owner, billing, delete the workspace			✓

Everyone can leave a workspace. A workspace always keeps one owner: the last owner hands the role to someone else first, or deletes the workspace.

See the team

Lists the members of the workspace and the invitations that wait for an answer.

Team

moin team

opens the web: w, then t

GET /api/v1/workspaces/{slug}

get_workspace

Invite someone

Sends an email that lets someone join the workspace. The invitation works for seven days.

Team, Invite a teammate, Send invite

moin team invite <email>

opens the web: w, then t

POST /api/v1/workspaces/{slug}/invitations

invite_member

--admin in the CLI invites them as an admin. They sign up with the address you invited, then land in your workspace. What each role may do is in Roles.

Send an invitation again

Sends the email again, for example when it landed in spam.

Team, Pending invitations, Resend

moin team resend <email>

opens the web: w, then t

POST /api/v1/workspaces/{slug}/invitations/{id}/resend

resend_invitation

Only the new link works.

Revoke an invitation

Takes an invitation back before someone accepts it.

Team, Pending invitations, Revoke

moin team revoke <email>

opens the web: w, then t

DELETE /api/v1/workspaces/{slug}/invitations/{id}

revoke_invitation

Rename the workspace

Changes the name everyone in the workspace sees.

Team, Workspace name, Save

moin team rename "<workspace-name>"

opens the web: w, then t

PATCH /api/v1/workspaces/{slug}/name

rename_workspace

Change a role

Makes a member an admin, or the other way round. Only an owner makes someone an owner or changes an owner’s role.

Team, Members, the role next to the person, then Save

PATCH /api/v1/workspaces/{slug}/members/{id}/role

Remove a member

Takes someone out of the workspace. Their API tokens for it stop working right away.

Team, Members, Remove next to the person

DELETE /api/v1/workspaces/{slug}/members/{id}

Leave or delete a workspace

Leave takes you out of the workspace. Its servers and apps stay for the others.

Delete workspace removes the workspace with its members, invitations, activity, servers and apps from moin. Your apps keep running on your servers, and your bucket keeps its backups. Only an owner deletes a workspace, and you type its name first. It cannot be undone. A paid plan must be cancelled and run out first.

Team, Leave, then Leave workspace

Team, Delete workspace, then type its name

POST /api/v1/workspaces/{slug}/leave
DELETE /api/v1/workspaces/{slug}

The last owner cannot leave: change a role to make someone else an owner first.

Why only the web

Changing roles, removing people, leaving and deleting a workspace need you signed in on the web. An API token, and so the CLI, the TUI and agents, cannot do them. A leaked token can never lock your team out or delete its work.

Tokens and workspaces

A personal API token belongs to one workspace: you pick it when you create the token under Settings. The CLI, the terminal UI, the GitHub Action and agents work in that workspace. For another workspace, log in with one of its tokens:

moin login --token pat_…

Activity

Every change goes into the activity of the workspace: who did it, to the second, how it came in and what changed. Filter it by app, server or member and page back as far as you like. The activity log shows what it records and what it never records.