Skip to main content

Set up your organization

1. Confirm your org​

After signup or invite, open CortexHub Cloud. Signup creates your organisation automatically.

Use the org switcher in the sidebar to move between orgs you belong to or own. Each org is fully independent. As an owner or admin, use the space switcher to move between Org space (org configuration) and your own My space.

2. Invite members​

Org membership is the only membership layer.

  • New people: Org space -> Users -> Invite members. Choose org role (Admin or Member) and send the invitation. Owners can grant the Owner role after the member joins.
  • Existing members: Users -> open the member -> change role if needed.

New members are placed in the All staff group automatically. Add them to additional groups from Groups.

Paid seats cap how many members receive an entitled co-worker. Check Billing for seat limits.

3. Toolkits in the org​

CortexHub publishes integrations to a global catalogue. An org admin must select a catalogue toolkit under Toolkits to enable it for the organisation; catalogue publication alone does not add it to your inventory.

Custom OpenAPI toolkits are created under Toolkits -> Add custom toolkit by uploading or fetching an OpenAPI spec (org admin). Tools are discovered, classified, and indexed automatically.

Being in the org catalogue does not grant any group access by itself. Publish a toolkit to the groups that may use it from Groups -> a group -> Toolkits & Tool Access. Members cannot connect or use a toolkit until their group is entitled to it.

Members connect entitled toolkits once from the My space Toolkits page. That single connection is reused by their co-worker and by their external MCP clients.

4. Create an Org Agent​

Open Org space -> Agents -> Create Org Agent to create a shared hosted agent, or register an SDK Org Agent when your own runtime will make the calls. Assign it to an agent group before you publish tools. A hosted agent can be installed as a named Slack bot from its Slack settings; see Org Agents.

5. Configure groups​

Open Groups:

  1. Select a group (or create one).
  2. On Toolkits & Tool Access, grant toolkit entitlements (and per-tool scope where needed) for each integration this group may use.
  3. Review the access rules seeded per safety profile (read, write, destructive) on the published toolkit's Policies tab.
  4. On Guardrails, add any group-specific guardrail patterns (these can only tighten the org floor).

Groups are the only tool gate. See Tool access for your team.

6. Policy floor and security​

The org-wide governance floor every group and member inherits lives on the Policies page. Open Policies to author it as plain-English rules or by applying compliance profiles. Group and member policies can only tighten it, never loosen it.

The Security page holds the runtime protections, on two tabs plus a pinned kill switch:

  • Data handling: whether tool-call payloads are stored, privacy mode, fail mode, and the built-in secret detectors.
  • Runtime guardrails: the prompt-injection guard, rate limits, and custom guardrail patterns.
  • Kill switch: the break-glass control, pinned below the tabs.

See Guardrails and privacy and Policies and approvals.

See also​