# Stop sharing the login. **Category:** Team members Invite team members by email, and decide for each one whether they can touch billing. That is the whole permission model — because for a tool that manages one site's metadata, a nine-role matrix is a configuration burden pretending to be security. --- ## The problem Every tool a small team uses does one of two things. It charges per seat until nobody can justify adding the marketing hire, or it ships a permissions system that takes an afternoon to configure and gets configured once, badly. So teams share one password. Then someone leaves, and rotating it means telling five people, and one of them does not get the message. A **shared account** is not a permission model — it is the absence of one. --- ## How it works 1. **Send an invite** — An email address, and one toggle: can this person manage billing? That is the entire form. 2. **They accept and set up their account** — The link is single-use and expires after 14 days. If they already have a MetaPilot login it just joins them to your organization; if not, registration skips straight past creating an org of their own. 3. **They are in** — Same organization, same site, their own login — and their own alert preferences, so notifications reach the person who cares about them. --- ## What you get - **One permission, deliberately** — Manage billing, or do not. Everything else in the product is shared work on one site, and a viewer/editor/admin matrix would be three abstractions guarding a single real decision — configured wrong, once, and never revisited. - **No per-seat charge** — Plans are priced on pages under management, not people. Adding the new marketing hire to a shared-account SEO tool should not be a budget conversation. - **Alerts fan out to the team** — Uptime, structured-data liveness and injection alerts go to whoever opted in, per person — not to one shared inbox nobody watches. - **Revoke access properly** — Remove someone and they are out. No password to rotate, no shared credential to chase, no telling five people and hoping all five read the message. - **Pending invites are visible** — See who has been invited and has not accepted — expired ones included, dimmed rather than hidden — and resend or cancel from the same list. Resending invalidates the old link. - **Agencies work naturally** — One organization per client site, and invite the account manager into the ones they run. One person can belong to as many organizations as they like and switch between them. - **Guards that keep you unstuck** — The last member cannot be removed and the last billing manager cannot be demoted, so nobody can lock the organization out of fixing a declined card. A forwarded invite link will not silently attach a stranger's account either. --- ## Plan availability Available on **every plan**, with **no per-seat charge** and no cap on members. What your plan buys is pages — 5 on Free through 2,000 on Business — never headcount. Inviting a colleague costs nothing. --- ## Frequently asked **Do extra members cost more?** No. Pricing is based on one number, pages under management, so the number of people looking at them is irrelevant to your bill. **Who can invite someone?** Any member. Deciding who else joins is not treated as an admin-only act — gating invites behind a second permission is exactly how a role system nobody asked for begins. **Can I limit someone to read-only?** Not today. The one permission is billing; everything else is shared work on one site. If you need finer control, tell us — that is the kind of thing worth building on real demand rather than speculation. **What does billing access actually gate?** Changing or cancelling the plan, invoices, and the card on file. The billing page itself stays readable for everyone, because roughly fifteen places in the product link to it — a teammate who just hit a page cap should land on the plan, not on a 403. **Can one person be in more than one organization?** Yes. Agencies run a separate organization per client site and switch between them from the same login. **What happens to an invite that is never accepted?** It expires after 14 days. You can cancel it or resend it from the Members page, and resending issues a fresh link that replaces the old one. --- ## Keep reading - Managing multiple websites in one account - Uptime and structured-data monitoring - Review and approve changes before they ship - What is MetaPilot?