Skip to content
Neutree Documentation

Key concepts

Neutree uses workspace policies to add users to specific workspaces, thereby limiting the scope of resources available to them, and to assign roles to users, thereby restricting their permissions on resources within that scope. This provides secure, standardized, and full-featured user authentication and permission management capabilities.

External applications can integrate with Neutree to programmatically use the capabilities it provides.

A user is the basic identity entity in Neutree. By configuring workspace policies, the same user can have different roles in different workspaces.

A role defines a set of operation permissions that control what actions a user can perform.

A workspace is the core unit of resource isolation, used to control the visibility and access permissions of different users to resources.

A workspace policy describes the association between a user, a role, and workspaces.

An API key is the credential that external applications use to access Neutree. Each API key has the same permissions as the user who created it within the corresponding workspace.

Neutree has a built-in AI gateway that serves as the unified entry point for all endpoint and external endpoint APIs. The AI gateway authenticates API calls based on the permissions inherited by the API key, and provides access log and usage statistics capabilities.