misconfig.aiSettings
Your account, your keys, your plan.
Sign in to see your settings
Settings belong to an account. Sign in from the app page and come back here.
Plan and usage
Loading your plan.
- Plan
- …
- Hosts left this period
- …
- Hosts used
- …
- Top-ups
- …
Pro renews monthly and can be cancelled from the billing portal; the remaining period stays paid up.
Passkeys
Phishing-resistant sign-in with your device's unlock. Register one per device you sign in from.
| Name | Added | Actions |
|---|
No passkeys yet. Add one so you can sign in without waiting for an email.
API keys
For CI jobs and integrations that start scans or read results. Send a key as the x-api-key header. A key is shown once, when it is created.
| Name | Key | Created | Last used | Actions |
|---|
No API keys.
New key
Copy it now. It is stored hashed and cannot be shown again.
Notifications
An email when a scan finds something new, something returns or something is fixed. On Pro, a signed webhook on every finished scan as well.
Webhook secret
Copy it now; it is not shown again. Each delivery carries x-misconfig-signature: t=<unix time>,v1=<hex> where v1 is HMAC-SHA256 of t + "." + body with this secret.
Signed-in devices
Every browser that holds a session for your account. Sign out the ones you do not recognise.
| Device | Signed in | Expires | Actions |
|---|
Account
Signed in as .
Delete this account
Removes every target, finding and piece of evidence in your workspace, cancels any subscription, and deletes your sign-in methods. We email you a confirmation link first; nothing changes until you open it.