Security and control
SpecStream holds your team’s work, your agents’ access and your money. These are the controls for each, as they work today.
Signing in
- Passkeys
- Sign in with a passkey, or with a one-time code sent to your email.
- Single sign-on
- SAML 2.0 with Okta, Microsoft Entra ID, Google Workspace, OneLogin, JumpCloud or any SAML provider, after you verify your domain with a DNS record.
- SCIM provisioning
- People join, change and leave through your identity provider.
- Sessions
- See every signed-in session with its last use, and sign any of them out.
Who can do what
- Roles
- Owner, editor and viewer, set per project.
- Invitations
- Invitations expire, and you can revoke them before they are accepted.
- Revoking access
- Takes effect everywhere at once: reads, downloads, decision replays, shared views and notifications.
- Share links
- Each link can expire, can allow or block exports, and can be revoked.
Money
- The price first
- Every run starts with its price, and nothing runs past the maximum you approve.
- Spending limits
- Set a limit for each member, each project and each key.
- No double charges
- A purchase carries a stable request key, so a retry never buys the same work twice.
Agents and keys
- API keys
- Shown once when created, each with its own scopes and spending limit.
- Delegated access
- Limit an agent to certain operations or one reviewed request, with a per-run limit, a monthly limit and an expiry date.
- OAuth clients
- Read, prepare or execute access, granted after you review the request, and revocable at any time.
Audit log
- Who did what
- Sign-ins, access changes, spending, exports, automations and list changes, filtered by kind and by person.
- Kept for 12 months
- Export it as CSV whenever you need it.
Your data
- Export
- Take your lists, results and evidence out as CSV, Excel, JSON or HTML.
- Deletion
- Deleting your account removes your lists, map placements and syncs, and revokes every credential.
- No training on your work
- No model is fine-tuned on your requests, lists or results.
Reading the web
- Pages are data
- Text on a page is read as data, never followed as instructions.
- Opting out
- Anyone can ask us to leave out their website, email or phone number at specstream.ai/opt-out.
Reviewing SpecStream for your company? Talk to a human and we’ll answer your questionnaire.