Workspaces

The Workspaces screen lets workspace owners and admins manage every aspect of a workspace's configuration. Select a workspace from the list on the left, then use the section rail to navigate between configuration areas.

Identity

The Identity section shows and lets you edit the workspace's basic properties:

• Name — the display name shown in the top bar.
• ID — the read-only unique identifier.
• Description — an optional summary.
• Vertical — the active vertical (finance, healthcare, legal, coding, etc.) that drives template filtering and marketplace ranking.
• Active / Inactive toggle — deactivate a workspace without deleting it.

Click Save to persist changes.

Secrets

The Secrets section is the local secrets vault. Store API keys and credentials here so agents and flows can reference them by name rather than embedding raw values in configuration.

• Each secret has a name (the reference key used in configuration) and an encrypted value.
• Click Add secret to create a new entry.
• Click the eye icon to temporarily reveal a value.
• Click Delete to remove a secret.

For secrets stored in an external vault, use the Connections screen (External secrets tab) to configure vault references.

Agents

The Agents section shows agents that have been defined inline in this workspace's configuration file (as opposed to agents created through the Agent registry UI). These are read-only here; edit them directly in the Config editor or through the Agents screen.

Cost

The Cost section lets you set budget limits and alerts for this workspace:

• Monthly budget — the maximum spend allowed per month. Flows and agents that would exceed this limit are blocked.
• Alert threshold — a percentage of the budget at which an alert notification is sent.
• Hard limit — whether to block all runs when the budget is exhausted, or only warn.

Changes take effect for the next billing period.

Team

The Team section shows the current seats on this workspace and lets you invite new members.

• Seats list — each member's email address and role.
• Remove — revoke a member's access.
• Invite form — enter an email address, choose a role (viewer, editor, admin, or owner), and click Invite.

Roles and their capabilities are managed in the Governance screen.

Cloud sync

Configure a cloud storage backend for this workspace. When cloud sync is enabled:

• Workspace configuration, agents, flows, and secrets are replicated to the configured bucket.
• The workspace can be restored on a new machine by pointing at the same bucket.

Fields: bucket URL, access credentials, sync interval, and encryption key.

Isolation

The Isolation section controls how strictly this workspace is isolated from others on the same AKOS installation. Three levels are available:

• None — shared resources; no network isolation.
• Standard — default. Isolated storage and network namespaces.
• Strict — maximum isolation; additional constraints on cross-workspace access and shared caches.

Changes are reflected immediately on the Governance > Policies screen.

Export / Import

The Export / Import section lets you:

• Export workspace — download a YAML/JSON snapshot of the entire workspace (agents, flows, triggers, secrets metadata — not secret values) for backup or migration.
• Import workspace — upload a previously exported file to restore or clone a workspace.

Danger zone

The Danger zone section (visible to workspace owners only) contains destructive actions:

• Rename workspace — changes the name and slug.
• Delete workspace — permanently deletes the workspace and all its data. This action requires you to type the workspace name to confirm. It is not reversible.

The Delete button is only enabled if another workspace exists to switch to, preventing you from accidentally deleting your only workspace.