Skip to content

Basic Concepts

Neutree provides secure, standards-compliant user authentication and permission management through workspace policies. Users are added to specific workspaces to limit their resource scope, and assigned roles to control their permissions within that scope.

External applications can integrate with Neutree to programmatically use its capabilities.

A user is the basic identity entity in Neutree. Through workspace policy configuration, the same user can have different roles in different workspaces.

A role defines a collection of operation permissions, controlling what actions a user can perform.

A workspace is the core mechanism for resource isolation, controlling different users’ visibility and access permissions to resources.

A workspace policy describes the association between users, roles, and workspaces.

An API key is a credential for external applications to access Neutree. Each API key inherits the permissions of the user who created it.

Neutree includes a built-in AI Gateway that serves as the access point for all endpoint APIs. The AI Gateway provides API key-based authentication and usage tracking.