Team, roles, agency access & white-label

Team members receive one of three roles: Viewer (read only), Editor (configure) or Admin. Internal team members see all of the account owner's websites — not scoped per site. A team admin can run the team and website management on the owner's behalf; subscription and billing, however, stay reserved for the owner.

An invitation's base role can be overridden per website: in team management via “Per-site roles” or through the API (PUT /team/invitations/:id/website-roles). That way someone can be Editor on website A and just Viewer on website B. Only websites owned by the account owner are assignable — foreign IDs are filtered out server-side.

TOTP (Google Authenticator, Authy) and passkeys (Touch ID, Face ID, YubiKey, Windows Hello). Activatable per user individually (TOTP + passkeys per account). With TOTP enabled, login asks for a second step after the password before a session token is issued.

Each invitation is valid for 7 days and issued personally to the email address. If the person already has a XICTRAQ account, access is active immediately (no registration detour) — otherwise a deep link leads to free registration. Up to 20 pending invitations per type are allowed per account.

A schedule consists of one or more layers. Each layer has a user list and a rotation: fixed (always the same person), daily (rotates per day) or weekly (rotates per week). Layers are evaluated top to bottom — the first matching layer wins. Each schedule has its own timezone (default Europe/Berlin).

Restrictions can be set per layer: specific weekdays (e.g. Mon–Fri) and a from–to time window (e.g. 09:00–17:00). If no window matches, evaluation falls through to the next layer — so one layer covers office hours and a second covers off-hours.

For a period (start_at to end_at) a person can be replaced by a stand-in. If the originally on-duty person falls inside the override window, the replacement address is alerted instead. An optional reason note can be added.

A cron job regularly checks whether the on-duty person has changed. On a change, the newly on-duty person automatically receives a handoff email — so they know immediately that they are now on call.

Company name (company_name), logo (logo_base64, PNG/JPG/SVG up to 500 KB, embedded as a data URI) and primary colour (primary_color, #RRGGBB). Once a company_name is set, the Powered-by-XICTRAQ footer is dropped automatically. These fields apply across status pages, PDF reports, PDF scan reports and brand mails. The accent colour (accent_color, #RRGGBB) applies to the quick-check widget, the status widget and the shared report — the status page, emails and PDF generation do not read it.

Additionally a contact name, address (street, ZIP, city, country), VAT ID, contact email, phone and website can be stored. Populated fields appear in the white-label PDF footer; empty fields are simply omitted.

The client accepts the invitation, creates a free account once and signs in — the assigned websites then appear directly in their dashboard. Status pages can additionally be shared publicly via token URL or a custom domain (status-page CNAME). A custom domain for the logged-in client portal is on the roadmap.

You invite clients by email and assign them the released websites — client access is always a viewer role, scoped to exactly the assigned sites (assigned_websites). The client portal is reserved for the Agency plan: 50 client slots. The assigned sites count against your own website limit (Agency 50).

Scheduled report templates (Business+) can be delivered to a recipient list (up to 20 addresses) — ideal to include clients directly. Recipients must belong to the account: your own address or invited team/client members; addresses outside the account are rejected. On Agency, PDFs automatically carry your logo, primary colour and company name (WhitelabelService); the Powered-by-XICTRAQ footer is dropped once a company name is set. Free/Starter/Business: default XICTRAQ branding.

Read (view monitoring data only), Edit (run scans, configure monitoring) or Manage (everything except billing and account deletion). The agency sees your websites in their own dashboard alongside their own projects.

You keep your own subscription, invoices and full control over your account. You decide which websites the agency sees and what permissions they have. Access can be revoked with one click at any time.

When agency access is revoked, the agency immediately loses access to your websites. Your account stays unchanged — your plan, data and settings remain intact. The agency no longer sees your websites in their dashboard. You can invite a new agency or re-grant access to the same one at any time.

On revoke (click the trash icon) the invitation is removed immediately. On the next page load the invited person loses access to all assigned websites. There is no transition period.

Invited users inherit the inviter's plan. After revoke their effective plan falls back to their own subscription (e.g. Free). If they have a paid subscription of their own, they keep those features. If not, they only see Free features.

The invited person's account is never deleted. After revoke they become the owner of their own (possibly empty) account. They can add their own websites, start their own subscription or be re-invited by someone else.