Settings & administration

The Settings area is where you administer your organization. Click Settings at the bottom of the sidebar and it opens a panel listing every settings page. Each page is shown only to roles that can use it; the capability named below is the one it needs.

Company

• General (org:view) — your organization's identity, address, legal details (you can fill the licence number by dropping in an operating licence), and how counterparties reach you. It also shows your company-wide insurance cover (CMR and cargo) the way a counterparty would vet it, plus your contacts and email domains. At the bottom is Data protection: how your organization's data is stored, an export of the organization's data, and a GDPR deletion request for it. Both actions need org:manage_org. Your own personal data is exported from your profile, not from here.
• Billing (billing:view) — your plan, usage, payment methods, billing details, and invoices. TOVR charges commission on executed freight; this is where you see and manage it.
• Costs & margins (vehicle:view) — the cost model every chain is priced with: margins, fixed costs per truck, driver, fuel, toll and time figures, compliance rules, per-country rates, default capacity by equipment type, and your home base. Changing costs needs vehicle:edit; changing margins needs org:manage_org. See Fleet › The cost model.

People & access

• Members (member:view) — invite teammates by email, change their role, or remove them. Every member holds one of the built-in roles — owner, admin, dispatcher, or viewer; see Getting started for what each can do. An invitation offers Member (dispatcher) or Admin; changing a role offers admin, dispatcher, or viewer; ownership moves with Transfer ownership… in the member's row menu. Inviting and changing roles need member:manage_members. Teams are a section of this page (team:view to see it, team:manage_teams to change one) — group members into teams to share access and assign roles in bulk. Members keep their own organization access.
• Roles (role:view) — the built-in roles and any custom roles you define.
• Access (role:view) — fine-grained, resource-level grants on top of roles.
• Single Sign-On (org:manage_org) — configure single sign-on for your organization.

Members, roles, and access together control who can see and do what across the platform.

Developer

Developer (org:manage_org) holds the credentials for building against TOVR:

• API keys — keys that let Claude Desktop, Cursor, and your own services call fOS tools over MCP or the REST API on behalf of your organization. A key is shown once when you create it; revoking one stops every service using it immediately.
• OAuth applications — the client applications that authenticate to the REST API. See Client applications below.
• Webhook endpoints — URLs TOVR calls when something changes, with each endpoint's recent deliveries. See Reference › Webhooks.

Client applications

A client application is the client_id and client_secret pair the REST API's token endpoint exchanges for a bearer token. They are created and managed here, in the dashboard — there is no API for them.

1. Open Settings › Developer and choose Create application under OAuth applications.
2. Name it, and pick the scopes it may use — read or write shipments, read chains, the change feed, vehicles, matches, quotes, or outreach, hold an event stream, price estimates, market analytics, and list or manage webhook endpoints. Tick every scope the integration needs, and at least one: an application with no scopes cannot be created, and a token can call only the endpoints its application's scopes name — any other /api/v1 call is refused with 403.
3. Copy the client secret. It is shown once and cannot be read back.

From the application's row you can copy its client ID, rename it, regenerate its secret (the old secret stops working immediately, and the new one is shown once), or delete it.

APEX keys

Keys for the APEX analytics API are issued by TOVR operators — see APEX › Authentication. There is no self-service page for them in Settings: key management was withdrawn when APEX became internal-only.

Activity

Activity (activity:view_activity) is your organization's audit feed — who did what, and when: member, team, role, and access changes, and changes to shipments, chains, fleet, billing, integrations, and the rest. Search by actor or target, and filter by event type, by who acted (anyone, people, automations, unattributed, the system, or one named person), and by date range (last 7, 30, or 90 days, or all time). Roles allowed to export (activity:export_activity) can download the filtered log as CSV or JSON.

Notifications

The bell shows your latest notifications — new chain proposals, wins, invoices, and the like — and can mark them all read. See all opens the full Notifications page, which can be filtered to unread ones.

Notification preferences, on your profile, is where you choose what reaches your bell and your inbox, grouped into freight chains, shipments and quotes, fleet, people, support, and billing. The choice is yours alone and applies to one organization at a time — if you belong to more than one, pick the organization at the top of the page. You are only offered the notifications your access lets you receive — a viewer, for example, never gets billing notifications.

Your profile

Some settings belong to you rather than to an organization. Open them from the account menu at the bottom of the sidebar: choose Profile. Every member can use them, whatever their role.

• Notification preferences — see Notifications above.
• Your own personal data — Export my personal data downloads everything TOVR holds about you as an individual: your account, sessions, memberships, support threads, and correspondence.

Support

Support, just above Settings at the bottom of the sidebar, is where you open and follow support cases, report a fraudulent company or other abuse, ask fOS, and find these docs.