Skip to content

Roles & Permissions

Wire uses role-based access control (RBAC) to manage permissions within organizations. Each member has a role that determines what actions they can perform.

RoleDescription
OwnerFull control over the organization
AdminCan manage members but not organization settings
MemberRead-only access to organization resources

The owner has complete control over the organization.

Permissions:

  • Create, read, update, and delete the organization
  • Manage all members (invite, remove, change roles)
  • Access billing and subscription settings
  • Create and manage all containers
  • Configure organization-wide settings

Notes:

  • The user who creates an organization is automatically the owner
  • Organizations can have multiple owners
  • There must always be at least one owner

Admins can manage team members but cannot modify organization-level settings.

Permissions:

  • View organization details
  • Invite new members
  • Remove members (except owners)
  • Change member roles (except to/from owner)
  • Create and manage containers
  • Access shared containers

Cannot:

  • Update organization name or settings
  • Delete the organization
  • Access billing settings
  • Remove or demote owners

Members have read-only access to the organization.

Permissions:

  • View organization details
  • View member list
  • Access containers shared with them
  • Use MCP tools on accessible containers
  • Create API keys for containers they can access

Cannot:

  • Invite or remove members
  • Change anyone’s role
  • Modify organization settings
  • Create containers (unless granted)

Containers have two visibility settings:

  • Private - All organization members can access
  • Public - Anyone with the MCP URL can access (no authentication required)
  1. Go to Organization Settings
  2. Click Members
  3. Click Invite Member
  4. Enter email and select role
  5. Click Send Invitation

The invited user will receive an email with a link to join your organization.

  1. Go to Organization SettingsMembers
  2. Find the member
  3. Click on their current role
  4. Select the new role
  1. Go to Organization SettingsMembers
  2. Find the member
  3. Click Remove
  4. Confirm removal

Removing a member immediately revokes their access to all containers in the organization.