Guides · Reference

Glossary

Account — What you sign in to on the dashboard. It holds your plan, your agent key, your browsers and your GitHub connection, and owns your projects. Quotas are counted here.

Account key (ak_) — The key your agent uses. It opens every project of the account within its scope. One live agent key per account.

Access preset — The rule attached to a table that says who may list, read, create, update and delete its rows: prive, partage, collaboratif, espaces, espace_modere, lecture_publique, journal, formulaire. Presets replace row-level security policies.

Agent — An AI assistant that calls the Manybases MCP tools with the account key: a local MCP server, or the remote connector.

App URL — The public address of an app. Invitation links are built from it; the first site deployment fills it in.

Browser identifier — The key each dashboard browser holds, never shown, cut when the browser is unlinked. Not an agent key.

Confirmation token — The single-use, five-minute token a 428 answer carries; re-sending the call with it executes a guarded gesture.

Cursor — The opaque string a list returns to fetch the next page. null means the last page.

Data plane — The API of one project, at proj-<id>.manybases.com, reached with a pk_ or sk_. Rows, schemas, spaces, end-user auth, files.

Edge function — Server-side code deployed by the agent, served at proj-<id>-fn-<slug>.manybases.com, holding a secret key of its own and talking to its project's API over HTTP.

Elevation token — MANYBASES_ACCOUNT_SESSION: your dashboard session token lent to a local agent for about an hour, so that it can make the gestures that need a signed-in human.

End user — A person who signs up to one of your apps. Not a Manybases account. Counted as a seat from the moment they sign up.

Hint — The third field of every refusal: what to do next, written for a program to act on.

Human boundary — The set of gestures that need a signed-in human of the account in addition to the key: deleting a project or a user, changing an app URL, creating a secret key, opening a non-empty table to the public, setting a secret's value, exporting, connecting GitHub. (Opening an app to sign-ups left this set on 2026-09-07.)

Idempotency key — The Idempotency-Key header on a POST: the same key within 24 hours returns the first response instead of redoing the write.

Inert key — Removed on 2026-09-07. A publishable key created by an agent alone used to work for everything except signing users up. Every publishable key now signs users up, whoever created it.

Management plane — The account's API at api.manybases.com, reached with the account key. Projects, keys, functions, sites, GitHub, secrets, and every data route mirrored under /v1/projects/:pid/….

Plane (in the log) — Which class of key made a request: data (pk_/sk_), management (ak_), unknown (no key or an unknown key).

Platform columns — The five columns every table carries and the platform manages: id, owner_id, space_id, created_at, updated_at.

Project — One app's backend: a database, a file bucket, its users, keys, functions and site. Addressed by proj_<ULID>.

Publishable key (pk_) — The project key that ships in an app's front end. Public by design; it identifies the project and grants nothing on its own.

Read-only mode — What a project is in when the account is above a volume quota: reads serve, writes answer 402, nothing is deleted.

Request id — The identifier every response carries in X-Request-Id (and in the body of a 5xx), and that the project's log shows. The way to find a call again.

Seat — One person signed up to an app. Taken at sign-up; signing in never takes another. 3 per app on Free, 1 000 on Builder and Studio.

Secret (of a project) — A value your code reads as env.NAME, set by a signed-in human in the project's Manage → Secrets and encrypted at rest. Every function of that project receives it, including the ones deployed later. It masks a shared secret of the same name.

Shared secret (of the account) — The same, set once on the account's Secrets screen: every function of every project receives it, including projects created later. Your agent sees its name and the note you write for it, never the value. Removing one is followed through to the last function.

Secret key (sk_) — The project key for your own server code. Every right on its project; the presets do not apply. Created only by a signed-in human.

Site — The static front end of an app deposited on Manybases, served at proj-<id>.manybases.online and at its readable subdomain. One per project, public, no copy kept.

Subdomain (of a site) — The readable address of a project's site, https://habit-tracker.manybases.online. At most one per project, derived from the project name at its first deployment or claimed before with claim_site_subdomain, and never changed afterwards. It lives in a registry (a chosen name cannot be computed from an id), unlike the derived proj-<id> address, which is composed and read nowhere.

Slug — The name of an edge function, which becomes its subdomain: 1–28 characters, a-z0-9 and inner hyphens.

Space — A group of end users inside one app. Rows on the two spaces presets belong to a space, and only its members reach them.

Two-step confirmation — The 428 confirmation_required answer to a guarded gesture: a summary of the consequence and a token; the same call with the token executes.