Overview
Start here for quick context and next steps.
Accounts & Teams
Understand personal vs. team workspaces and onboarding.
MCP Configuration
Connect Cursor, Claude Desktop, or custom MCP clients.
Resources & Tools
Resource URIs, knowledge graph access, and helper tools.
Billing & Credits
Credits, consumption, and subscription tiers.
Security & Access
Authentication, rate limits, and network controls.
portacall.ai relies on better-auth for session security, strict access key enforcement for MCP traffic, and layered middleware to keep abuse out. This page summarizes the controls you can rely on when integrating your organization.
Authorization: Bearer ak_... for all MCP calls.bodySizeLimit middleware enforces strict Content-Length headers (default 1 MB, higher for endpoints like team registration) and blocks chunked uploads.requireTeamRoot and requirePersonalAccount enforce the correct account type before performing sensitive actions (team billing, consumer-only features, etc.). Session data comes directly from better-auth.SameSite=Lax in development and SameSite=None + Secure in production with optional cross-subdomain support.deleteAllUserSessions.