Access is role-aware and person-owned

Orbit uses Better Auth for sessions and account management. The application distinguishes a person using their own workspace, a counselor viewing explicitly shared client data, and an administrator operating the system.

Roles

Role	Primary access
Owner	Their own balance, categories, habits, mood, settings, chat, and sharing controls.
Counselor	A client picker and read-only views for clients who have granted access.
Admin	The admin ticket workspace and telemetry surfaces, in addition to permitted application access.

Settings

The settings surface is the control center for personal preferences, account access, developer mode, integrations, and counselor sharing. Developer-gated settings also provide API-key management and connection instructions for remote Cursor MCP and ChatGPT OAuth. Role-aware routing prevents counselor users from entering owner-only product editing routes.

OAuth

Orbit can act as an OAuth authorization server for protected resources, including remote MCP access. It serves authorization metadata, OpenID metadata, protected-resource metadata, login, consent, and error routes.

Experimental Developer mode exposes a canvas route intended for controlled development use, not an end-user feature.

See Counselor workspace and Platform interfaces.