06 · Workspace

One workspace. Every action attributed.

A production house gets its own isolated database and private storage. Every account and session change writes an audit receipt.

01General02People03Plans & credits04Usage05Dashboard06Engines07Security
TenancyOne database per workspace
MembersUnlimited on paid plans
InvitesOne-time links · 7 days
Sign-inTOTP + recovery codes
ExportJSON + media manifest
Workspace, Plans and credits: the balance, the plan, credit packs and monthly statements
Generalworkspace-wide defaults
Workspace identityowner

The name your team sees everywhere; only the owner renames it.

Production defaultsworkspace-wide

Default video and still engine, and take approvals.

Prompt enhancerworkspace-wide

One provider for every suite, chosen here. Never applied to raw: prompts.

People
Invite7 days

One-time links an admin creates; they expire after seven days and are consumed in the same transaction as the seat.

Rolesowner · admin · member

Only the owner changes roles; admins invite, disable and unlock from the member row.

Access requestsreviewed

Requests from this site wait for the platform administrator; nothing is granted automatically.

Sign-in policyoptional by default

The owner can require an authenticator for everyone; until they enrol, members keep only account security, onboarding and workspace switching.

Usage
By project · person · monthCSV

Completed generations, attempts and failures, with a CSV export.

Dashboardby period

Revisions per shot and where generations stall; filter and export.

Engines
Atomik allowlistper engine

Choose which engines Atomik may propose.

Securityaccount-wide
Two-step sign-inTOTP

Authenticator enrolment verifies a code before enabling it, encrypts the secret, rejects replays and replaces earlier sessions.

Recovery codessingle-use

Random, hashed, single-use; replacement is staged, so an interrupted swap cannot lock you out.

Sessionsrevocable

List and revoke browser sessions; a password reset keeps two-step sign-in and signs every other session out.

Auditappend-only

Account, session, member and policy changes commit with an append-only security event in the same transaction.

API tokensread · render

Bearer tokens for the CLI and MCP server, shown once and stored hashed. Read tokens cannot mutate; account, team, key and owner operations need a browser session.

Dataexport · keep

The owner exports JSON, a takes CSV and a media manifest. Deleting a workspace ends access at once; its database and files are kept.

Not claimed yet: SSO, SCIM, passkeys and independently retained audit archives are open work. Uploads keep their original bytes and stay private; a deleted take is hidden, never erased, and can be restored.

The shell

The same room on every page.

Library on the left, Inspector on the right, one composer, one prompt enhancer. Every card is a button; nothing dead-ends in a toast.

The ⌘K palette
Projects
Home opens on your projects

Recent projects, saved projects, a new one. A project is one brief and one cast across every suite; switching suites waits for pending saves.

⌘K
Palette

Generate, suites, every page, Workspace, models, assets and “Ask Atomik: …”. Enter runs the top hit.

Library
Tools | Assets

On every stage. Every tile drags onto any reference well or Rig node. Download original is always the original bytes.

⌘J
Inspector

Controls, Inputs and Versions for whatever is selected: asset, take, run, node, item or stage.

Right-click
Menu everywhere

Copy, cut, paste, duplicate, move to, retry, and a 20-deep undo.

Enhancer
One prompt enhancer

One provider, chosen in Workspace › General. Never on raw: prompts.

On a phone

The same room, one hand.

Home · Workflow · Canvas · Takes · Edit in a glass tab bar, stage sheets that pull up over the work. Every tap target is at least 44 px.

HomeWorkflowCanvasTakesEdit≥ 44 px targets

Invite-only, built for small teams.

A stranger with an invite gets from email to first render in five minutes. Invites are one-time links, sent by a person.

Already invited? Sign in