---
title: "Application model"
description: "How Tooluse.net isolates members, credentials, operations, workflows, credit, and receipts."
---

> Documentation Index
> Fetch the complete documentation index at: https://help.tooluse.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Application model

<p>An application is the isolation boundary. A credential, connection, workflow, operation, invocation receipt, credit reservation, and purchase belongs to exactly one application.</p>
<h2 id="roles">Roles</h2>
<table>
<thead>
<tr>
<th>Role</th>
<th>Read</th>
<th>Configure and invoke</th>
<th>Manage members and owner-only billing</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>OWNER</code></td>
<td>Yes</td>
<td>Yes</td>
<td>Yes</td>
</tr>
<tr>
<td><code>DEVELOPER</code></td>
<td>Yes</td>
<td>Yes</td>
<td>No</td>
</tr>
<tr>
<td><code>VIEWER</code></td>
<td>Yes</td>
<td>No</td>
<td>No</td>
</tr>
</tbody>
</table>
<p>Downgrading or removing a member revokes that member’s Agent keys. Inaccessible applications return <code>404</code> so callers cannot enumerate application IDs.</p>
<h2 id="why-this-boundary-exists">Why this boundary exists</h2>
<p>Agents need narrower authority than the people who configure them. Application-scoped keys and operation discovery make the authority visible and revocable without exposing workspace-wide orchestration APIs.</p>
<h2 id="boundaries">Boundaries</h2>
<ul>
<li>An application does not make a disabled or unconfigured operation callable.</li>
<li>A credential value is write-only and never returned by a later read.</li>
<li>A receipt from one application cannot be used to retrieve another application’s result.</li>
<li>Platform-operator and internal runtime APIs are separate from application membership.</li>
</ul>
<h2 id="see-also">See also</h2>
<ul>
<li><a href="/reference/api#developer-account-and-applications">Applications and members</a></li>
<li><a href="/getting-started/authentication">Authentication</a></li>
<li><a href="/operate/receipts">Receipts and result retention</a></li>
</ul>

Source: https://help.tooluse.net/getting-started/application-model/index.mdx