My Account

In the top-right of the PubNub Admin Portal, there are two menus for managing your account.

• Account menu — click your email address to open:

Name	Description
Switch organization	Switch between your personal account and any organizations you belong to.
Organization settings	Manage organization-level settings, including: Settings: Legal company name, organization name, MCP connection access, and data storage region. Members: Manage members and assign roles. API Management: Manage Service Integrations and API Keys to programmatically access the PubNub Admin API. Plans and billing: Add payment information and check your current pricing and support plans. Invoices and costs: View previous invoices and the current month’s costs. Billing alerts: Customize billing triggers based on cost or usage (paid plans only). Audit Log: Track actions performed across your organization (paid plans only). Compliance: Downloadable compliance reports. SSO: Single Sign-On settings for your organization.
Plans and billing	Add payment information and check your current pricing and support plans. Use the Pricing plans tab to change plans and compare options.
Billing alerts (Paid members only)	Customize billing triggers for your PubNub account based on cost or usage.
Support	Open the support contact form.

MCP Connections

The MCP Connections page shows all Model Context Protocol (MCP) clients connected to your PubNub account. Connections expire one month after creation. MCP clients are AI-powered development tools like Cursor, VS Code, Claude Code, and others that can interact with PubNub on your behalf using the PubNub MCP Server.

To access MCP Connections, click Profile settings in the account menu, then select MCP Connections from the sidebar.

View active connections

The MCP Connections page displays a table of all active connections:

Column	Description
Organization name	The PubNub organization the client has access to
MCP Client	The connected client name and Client ID
Created	When the connection was established
Expiration	When the connection expires
Remove	Action to revoke the connection

Connection expiration

MCP connections automatically expire one month after creation. To continue using the MCP client, you'll need to reauthenticate when prompted.

Revoke a connection

To revoke an MCP client's access:

1. Navigate to Profile settings → MCP Connections.

2. Find the connection you want to revoke in the table.

3. Click Remove in the rightmost column.

4. Confirm the revocation when prompted.

The MCP client will immediately lose access to your PubNub account. You can reauthorize the client at any time by going through the OAuth flow again.

MCP Connection Access

Account administrators only

This setting is only available to Account Admins.

Account administrators can enable or disable MCP access for the entire organization. When disabled, no users in the organization can authorize new MCP clients.

To manage MCP connection access:

1. Navigate to Organization settings.

2. Find the MCP connection access section.

3. Toggle Allow MCP connections for all clients to enable or disable MCP access.

4. If disabling, confirm your choice in the confirmation dialog.

When MCP access is disabled:

• Existing MCP connections will be rejected by PubNub APIs.
• New OAuth authorizations for MCP clients are blocked.
• The organization won't appear in the account selection screen during OAuth authorization.

Plans and billing

• Profile menu — click the avatar icon to open:

  

  Name	Description
  Profile settings	Shows your account details in the Admin Portal.
  Log out	Sign out of the Admin Portal.

Members and roles

Use Member management to invite members to administer your application. Assign a role to grant access.

Invite a member

To invite a new member to your organization:

1. In the top-right, click your account name (email address).
2. Select Organization settings from the dropdown.
3. Open the Members tab.
4. Click Add member, enter the member’s email address, and select a role.

:::note Personal vs. organization accounts When a member accepts your invitation, they can switch between their personal account and your organization using the dropdown on the Homepage. Any role restrictions you assign apply only to their account within your organization, not their personal account. :::

Role permissions

Member roles control access and permissions in your account. Each role enables specific tasks and features.

:::note Account Owner Every organization has one Account Owner — the user who created the organization. This is a permanent designation that cannot be removed or reassigned. The Account Owner has the same full access as an Account Admin and cannot be invited or managed through the Members tab. :::

Role name	Permissions	Description
Account Admin	Full control over the account Create, update, delete secrets	Highest level of access within the account.
App Admin	All permissions of "App Viewer" All permissions of "Functions Developer" Modify app and its keys Create, view, and edit Functions Deployments on app level	Enables changes to app settings and keys.
App Viewer	All permissions of "Functions Viewer" Access app View keys (secret key excluded) Observe app usage View Functions Deployments on app level	Basic access for reviewing app-related information.
Key Admin	All permissions of "Key Viewer" All permissions of "Functions Developer" Modify key Create, update, delete secrets Create, view, and edit Functions Deployments on keyset level	Allows changes to key settings.
Key Viewer	All permissions of "Functions Viewer" Access key information (secret key excluded) Observe key usage View Functions Deployments on keyset level	Provides key access (no secret key).
PubNub Insights	View Insights dashboards Edit dashboard settings No access to app and keyset settings	Provides read-only access to Insights information. Restricted from certain areas like Functions, and Events & Actions.
BizOps Objects Operator	Manage members, member memberships, channels, channel memberships and presence rules for a keyset.	Restricted from other Admin Portal sections.
Illuminate Admin	View, create, and edit Business Objects, Dashboards and Decisions in Illuminate.	Restricted from other Admin Portal sections.
Functions Developer	Create, edit, delete packages and functions. Manage functions for the entire account (apps and their keys).	Manage all account functions and packages. This role can only be assigned to members who do not have the Account Admin role.
Functions Viewer	View functions for the entire account (apps and their keys). Provides access to view code for account-level functions.	This role can only be assigned to members who do not have the Account Admin role.

Mutually exclusive roles

Some roles cannot be assigned together because they have overlapping or conflicting permissions.

If the member has this role	They cannot also have
Account Admin	App Admin, App Viewer, Keyset Admin, Keyset Viewer, PubNub Insights, BizOps Objects Operator, Functions Viewer, Functions Developer, Illuminate Admin
App Admin	Account Admin, App Viewer (same app), Keyset Admin (same app), Keyset Viewer (same app)
App Viewer	Account Admin, App Admin (same app), Keyset Viewer (same app)
Keyset Admin	Account Admin, App Admin (same app), Keyset Viewer (same keyset)
Keyset Viewer	Account Admin, App Admin (same app), App Viewer (same app), Keyset Admin (same keyset)
PubNub Insights	Account Admin
BizOps Objects Operator	Account Admin
Functions Developer	Account Admin, Functions Viewer
Functions Viewer	Account Admin, Functions Developer
Illuminate Admin	Account Admin