Skip to content
Neutree Documentation

Key concepts

Neutree uses workspace policies to add users to specific workspaces, thereby limiting the scope of resources available to them, and to assign roles to users, thereby restricting their permissions on resources within that scope. This provides secure, standardized, and full-featured user authentication and permission management capabilities.

External applications can integrate with Neutree to programmatically use the capabilities it provides.

A user is the basic identity entity in Neutree. By configuring workspace policies, the same user can have different roles in different workspaces.

A role defines a set of operation permissions that control what actions a user can perform.

A workspace is the core unit of resource isolation, used to control the visibility and access permissions of different users to resources.

A workspace policy describes the association between a user, a role, and workspaces.

An API key is the credential that external applications use to access Neutree. Each API key has the same permissions as the user who created it.

Neutree has a built-in AI gateway that serves as the unified entry point for all endpoint and external endpoint APIs. The AI gateway provides API key-based authentication and usage statistics.