Team & security

Your team, your keys, your audit trail

Invite teammates by email or with a join link, give each a role, hand out API keys with exactly the scope they need, and see every change in an audit log. Two-step sign-in for anyone who wants it; every signed-in device listed, with remote sign-out.

Access & governance

Workspace roles, permissions, and account security

Roles

Owner, admin and operator. Operators answer; admins change the workspace, the widget, the channels and the plan.

Invitations and join links

Invite one person by email, or share one join link in Slack or by email with a role, an expiry, a use limit or an allowed email domain - and turn it off at any time. An invitation is emailed again at most once in ten minutes and five times a day; in between, you get its link to pass on yourself.

API keys with scopes

Read, Write, or both. A key can read conversations, contacts and usage and update a conversation or a contact, but no key can change the workspace’s settings, channels, team, keys or billing. Keys are shown once and stored only as hashes.

Audit log

Every change to the workspace, by whom and from where - settings, channels, automations, the plan, the keys. Secrets never appear in it.

Two-step sign-in

A code from an authenticator app after the password, with recovery codes. Required for whoever runs the server; a switch away for everyone else.

Every device listed

See every device signed in to your account and sign any of them out from here. Changing your password signs out the rest.

Several workspaces, one sign-in

Run every brand, shop or client from one account, and see who is waiting in each without switching.

Credentials kept sealed

An AI key, a bot token, a Page token, a WhatsApp access token: checked with its service before it is stored, encrypted at rest, shown as a hint only, never written to any log. The order lookup signing secret is encrypted too, and a Crisp key used for an import is never stored at all.

Billing without a card number

Plans are paid by card through Stripe Checkout and managed in Stripe’s portal - or, where offered, with PayPal or in crypto through OxaPay. No card number ever reaches Krisp.

Bring the team in

Three teammates free; more on every paid plan.