Account Settings
Manage your profile, security settings, privacy preferences, and connected accounts.
Profile Settings
Updating Your Profile
- Go to Settings → Profile
- Update your information:
| Field | Description |
|---|---|
| Name | Your display name |
| Account email (requires verification) | |
| Avatar | Profile picture |
- Click Save Changes
Changing Email
- Enter new email address
- Click Save
- Check your inbox for verification link
- Click the link to confirm
Email change: You must verify the new email before it becomes active.
Security Settings
Changing Password
- Go to Settings → Security
- Click “Change Password”
- Enter current password
- Enter new password (min 8 characters)
- Confirm new password
- Click Save
Password requirements:
- At least 8 characters
- Mix of letters and numbers recommended
- Avoid common passwords
Two-Factor Authentication (2FA)
Coming soon: 2FA support is on our roadmap.
Active Sessions
View and manage your login sessions:
- Go to Settings → Security → Sessions
- See all active sessions:
- Device/browser
- Location (approximate)
- Last active
- Click “Revoke” to end a session
Trusted IPs
When you log in from a new IP address:
- We send a verification email
- Click the link to trust the new IP
- Future logins from that IP won’t require verification
Managing trusted IPs:
- Go to Settings → Security → Trusted IPs
- See all trusted IP addresses
- Remove IPs you don’t recognize
Connected Accounts
OAuth Providers
Link your account with:
- GitHub — Sign in with GitHub
- Google — Sign in with Google
Linking an Account
- Go to Settings → Connected Accounts
- Click “Connect” next to the provider
- Authorize ProtectMyAPI
- Account is now linked
Unlinking an Account
- Go to Settings → Connected Accounts
- Click “Disconnect” next to the provider
- Confirm
Password required: If you only have OAuth login, set a password before disconnecting all providers.
Privacy & Data
Your Privacy Rights
Depending on your location, you have rights to:
- Access — Download all your data
- Delete — Request account deletion
- Portability — Export data in standard format
Data Export
Export all your personal data:
- Go to Settings → Privacy
- Click “Export My Data”
- We’ll email you a download link
- Link expires in 24 hours
Export includes:
- Profile information
- Organizations & memberships
- Apps & configurations
- Usage statistics
- Audit logs
Account Deletion
Permanent action: Account deletion cannot be undone. All data will be permanently removed.
Request Deletion
- Go to Settings → Privacy
- Click “Delete Account”
- Read the warnings carefully
- Enter your password to confirm
- Click “Schedule Deletion”
Grace Period
After requesting deletion:
- 30-day grace period (may vary by region)
- You can still log in and cancel
- API access is immediately blocked
- At period end, data is permanently deleted
Canceling Deletion
If you change your mind:
- Log in during the grace period
- Go to Settings → Privacy
- Click “Cancel Deletion”
- Account is fully restored
Notification Settings
Email Notifications
Configure which emails you receive:
| Notification | Description |
|---|---|
| Security Alerts | New login, password change |
| Usage Alerts | 80%, 90%, 100% quota warnings |
| Product Updates | New features, announcements |
| Team Activity | Member joins, invitations |
Managing Preferences
- Go to Settings → Notifications
- Toggle notifications on/off
- Changes save automatically
API Keys (Personal)
For API access (not the same as app secrets):
Generating API Key
- Go to Settings → API Keys
- Click “Generate New Key”
- Copy the key immediately
- Key is shown only once
Using API Keys
curl -H "Authorization: Bearer YOUR_API_KEY" \
https://api.protectmyapi.com/v1/organizationsRevoking API Keys
- Go to Settings → API Keys
- Click “Revoke” next to the key
- Key stops working immediately
MCP Server Access
For AI assistant integration (Cursor, Claude, etc.):
Generating MCP Key
- Go to Settings → MCP Server
- Click “Generate Key”
- Copy the configuration for your AI tool
Configuration Example
{
"mcpServers": {
"protectmyapi": {
"command": "npx",
"args": ["-y", "@protectmyapi/mcp-server"],
"env": {
"PROTECTMYAPI_KEY": "mcp_your_key_here"
}
}
}
}See MCP Server Guide for full setup instructions.
Organization Settings
Switching Organizations
- Click organization dropdown (top-left)
- Select an organization
- Context switches to that org
Organization Profile
- Go to Settings → Organization
- Update organization name
- View organization ID
Leaving an Organization
- Go to Settings → Organization
- Click “Leave Organization”
- Confirm
Owners cannot leave: Transfer ownership first, then you can leave.
Danger Zone
Actions that can’t be undone:
Delete Organization
- Go to Settings → Organization → Danger Zone
- Click “Delete Organization”
- Type organization name to confirm
- All apps, secrets, and data are deleted
Transfer Ownership
- Go to Settings → Organization
- Click “Transfer Ownership”
- Select new owner
- Confirm transfer
Troubleshooting
”Cannot change email”
- Check you have access to the new email
- Verify the confirmation link
- Try a different email if issues persist
”Locked out of account”
- Use “Forgot Password” to reset
- Check for verification emails
- Contact [email protected]
”OAuth disconnect failed”
- Set a password first
- Ensure at least one login method remains