# Settings reference

# Settings reference

A quick index of where to find things in the portal. Settings live at two levels: **workspace defaults** (organization-wide) and **per-repository overrides** (which fall back to the workspace default when left unset).

## Review config

**Settings → Review config** — the defaults for how PRs are reviewed:

- **Severity threshold** — the bar a finding must clear to be posted.
- **Review identity** — post as the inline bot or the connected user.
- **Custom instructions** — free-text guidance folded into every review.
- **Path filters** — extra globs to never review.
- **Merge gate** — off / report / block by severity.
- **Monthly budget** and **budget-degrade** behavior.
- **Reasoning effort** — how hard the deep review thinks.
- Optional modules: **Walkthroughs**, **Sandbox tests**, **Browser e2e**, **Auto-fix**, **Code graph**, **Breaking-change checks**.
- **MCP** — enable pre-PR review and set spend caps.

See [configuring reviews](./review-config.html) for the details.

## Per-repository settings

On each repository (**Repositories → a repo**): the same review settings as above, plus **enabled**, offered as overrides. Anything left as "inherit" follows the workspace default.

## Learnings & skills

- **Learnings** — taught rules and proposed suppressions awaiting approval.
- **Skills** — authored expertise packs and their attachment (workspace-wide or per-repo).

## Security & monitoring modules

Each module has its own settings area:

| Module | Where | Key controls |
| --- | --- | --- |
| [Sentinel](./sentinel.html) | Security → Overview | Enable, severity threshold, native alerts, fix mode. |
| [Pentest](./pentest.html) | Pentest → Settings | Enable, depth, severity floor, schedule, cost cap, attack classes. |
| [Actions](./actions.html) | Actions → Settings | Enable, detectors, branch filter. |
| [Cloud](./cloud.html) | Cloud → Connections | Connect subscription, scan interval, AI triage. |
| [Compliance](./compliance.html) | Compliance → Settings | Enable, PR-time checks, agreements. |

## Organization & people

**Settings → Organization** and member management:

- Rename the organization, transfer ownership (owner only).
- [Invite members](./members-invites.html) and assign roles.
- Manage [GitHub connections](./connect-github.html).

## Notifications

**Settings → Notifications** — [Teams channels and email routing](./notifications.html) by category.

## Ad-hoc review (MCP)

**Ad-hoc review** — mint your [MCP keys](./mcp.html); admins configure workspace enablement and budgets.