Account Settings

Separate account settings from site settings

Account Settings applies to your identity and cross-site account views. Domains, SMTP, redirects, collaborators, and the detailed subscription controls remain attached to a selected site.

Profile Information

Email Address shows the authenticated email and is disabled in the current UI. Display Name is editable; choose Update Profile to save it. Use a recognizable name so collaborators can identify you.

Account Information

Account Created, Last Sign In, and Account Status describe the authentication account. These values do not report a site’s publication, plan, or domain state.

AI clients & MCP

Connect with the server URL

1. Copy the MCP server URL displayed in Account Settings.

2. In a compatible remote client, create a custom connector or Streamable HTTP MCP server and paste that URL.

3. Choose OAuth when prompted. Sign in to Luna Sites, review the requested scopes, and allow access only when you recognize the client and callback.

4. Return to the client and test a read-only site-list action before authoring.

OAuth and token security

The verified account MCP uses OAuth 2.1 authorization code flow with PKCE S256, dynamic client registration, short-lived access tokens, and rotated refresh tokens. No API key needs to be copied into the client.

Scopes and live role enforcement

Scopes can allow site reading and selection, site creation, content writing, publishing, analytics reading, response reading, and complete site deletion. Luna checks both the granted OAuth scope and the user’s current site membership and role on every request.

Owners control their sites. Administrator collaborators can select, edit, and publish sites they administer. Contributors remain read-only for account MCP authoring. Complete site deletion remains owner-only, requires its explicit scope, and still requires confirmation.

Remove connections and change roles

Disconnect or revoke the connector from the AI client’s connection settings when it is no longer trusted; remove the saved server entry as well. If the client does not expose revocation, remove the connector and contact Luna support before reconnecting.

Removing a site collaborator or changing their role takes effect on the next MCP request. Reauthorize when scopes need to change, and verify the active Codex, ChatGPT, Claude, or other client identity before sensitive work.

Review Billed Sites

Billed Sites combines paid site records for the account. Each row identifies the site, plan, status, and paid-period end when available. This is an account-level inventory; open the selected site’s Settings for its full plan and renewal choices.

Cancel Subscription appears only when the record is cancellable. Confirmation states that Pro access remains until the current paid period ends. A row with No action needed does not offer a billing mutation.

Billing safety

Match both site name and Site ID before cancelling. Cancelled subscriptions can still block account deletion until their paid period ends, and active, trialing, or past-due subscriptions must be cancelled or resolved first.

Understand the Danger Zone

Account deletion is available only after all owned sites and billing subscriptions are resolved. Delete or transfer every owned site, then cancel or resolve active, trialing, and past-due paid subscriptions.

A cancelled paid subscription can remain a blocker until its current period ends. When no owned sites or blocking subscriptions remain, Request Deletion opens the verified support email workflow; support completes the request.

Responsive and accessible use

Account panels remain in one vertical sequence. Profile fields stay full width, MCP permission cards move from columns to a stack, Billed Sites actions stack beneath details, and the Danger Zone keeps its blockers before the request action on narrow screens.

Use section headings, visible labels, and text status values. The MCP URL can scroll horizontally without altering it. Move through Copy URL, profile, billing, and deletion controls with Tab, and read every scope or blocker before confirming.

Common mistakes checklist

• Do not use Account Settings for a site’s domain or SMTP.

• Do not authorize an MCP client you do not recognize.

• Do not assume removing a client changes site membership; manage roles in the site.

• Do not request account deletion before sites and paid periods are resolved.

Related documentation

See Site Settings, Subscriptions & Billing, and Add Collaborators from the Dashboard.