Companies

A company is the top-level organizational unit in Cicle. All data — teams, boards, cards — belongs to a company.

How Companies Work with API Keys

When you create a Company API Key, it is bound to one specific company. This means:

All requests using this key automatically operate within that company's data.

You do not need to pass companyId as a query parameter — it is injected from the key's binding.

The key cannot access data from other companies.

Role Hierarchy

Members within a company have different roles that determine their access level:

Role	What They Can Do
Super	Full access. Company creator.
Admin	Almost everything. Cannot remove super admins.
Manager	Manage teams if owner. Invite/remove people below.
SPV	Supervisor. Limited team management.
Member	Read-only. Can comment on things they create.
Guest	Read-only.

When using a Company API Key, the system operates with admin role by default. This is a design decision — the actual access control is handled by the API key's permission scopes, not the role.

Subscription Requirement

Company API Keys require an active subscription. If the subscription expires, all API requests using that key will be rejected with 402 Payment Required.

Overview

Companies#

How Companies Work with API Keys#

Role Hierarchy#

Subscription Requirement#

Companies

How Companies Work with API Keys

Role Hierarchy

Subscription Requirement