The dashboard tour
This is a fast walk-through of every left-nav section so you know where to look for what.
Overview
The page at /dashboard is your home. Three big-number cards across the top:
- ACTIVE AGENTS → clicks through to
/agents - CONNECTED PLATFORMS → clicks through to
/platforms - PROXIED CALLS · 24H → clicks through to
/audit
Below that, a 7-day activity sparkline and an Anomalies & Approvals sidebar panel that shows up to four pending items. The badge on the sidebar item turns amber when there’s something needing your attention.
Agents
/agents lists every agent under your account, split across two tabs: Active (default) and Pending Approval (registration requests from the agent_register MCP tool or the CLI’s --owner path; agents registered from the dashboard or with the signed-in CLI are active immediately). The blue “{N} registered” badge in the header is your current count.
Open any agent to see its permission matrix — every platform grant it holds and the scopes in it, with a require_approval toggle on each grant (it applies to every call under that grant, reads included). From the detail page you can suspend, reactivate, delete, or rotate the install token.
Platforms
/platforms is your catalog of connectable services. Each card shows a status badge: active (green), expiring_soon (amber), reauth_needed (red), or untested (gray). The “Last used” line is a relative date, or “Never used” if the agent hasn’t called it yet.
The platform limit indicator at the top of the page tells you how many connections you’re allowed under your current plan.
Approvals
/approvals is the queue of agent actions waiting on you. Auto-refreshes every 5 seconds. When empty: a single checkmark and “All agent actions are within approved permissions.” The amber “{N} pending” badge in the header matches the number of cards visible.
The first time you visit, a banner offers to enable push notifications so you can approve from any device.
Policies & Guardrails
/policies is where you define named bundles of allow/deny/approval rules and assign them per teammate — every agent that teammate owns inherits the policy’s limits. /guardrails is one level higher: org-wide deny or require-approval rules that run before any policy and cannot be overridden (e.g. “members never see PII”). Both are manager-only. See Manage user policies and Manage org guardrails.
Audit Log
/audit is the record of agent activity. Two tabs: Actions (everything an agent did or tried) and Policy Decisions (explicit AuthZEN evaluations an agent asked for with authzen_evaluate; ordinary denials are on Actions). Filter by date range, agent, action type, free text. Export buttons (CSV / JSON, plus a printable PDF view) appear on the Team plan and above, alongside a Compliance CSV for admins.
If your filters return more than 1,000 rows, the dashboard truncates and tells you: “Showing the most recent 1,000 of {total} matching rows.”
Security Anomalies
/anomalies shows things the hourly anomaly scanner flagged. Tabs for Active / Resolved / All. Each row has a severity badge (CRITICAL/WARNING/INFO), the anomaly type, and what auto-action (if any) was taken — none, FLAGGED, or AUTO-SUSPENDED. Click Resolve when you’ve investigated.
Agent Reports
/agent-reports is the inbound side of agent self-diagnostics. Filter by date, agent, severity (debug/info/warn/error/critical), and free-text search the message. Click a row for the full context JSON and the correlation_id you can use to find the originating audit entry.
Notifications
/notifications is a unified inbox: pending registrations, uninstall requests, self-reports, and registration requests, all grouped by type with a per-section link to the full list.
Settings
/settings is everything personal: display name, email/password, passkeys, push toggles (Team plan and above), anomaly sensitivity, timezone, your Owner ID + Proxy URL (in the Account section), Paperclip integration, approval delegation (Team plan and above, where enabled), the 30-day money-back guarantee card on paid plans, and a danger zone (export data, suspend all agents, delete account).
Billing
/billing shows your plan, this month’s usage (with progress bars and overage estimates), the 12-month rollup, and lets you upgrade, downgrade, or open the Stripe portal.
Superadmin
Only visible if your owner has the superadmin flag. /superadmin is the platform catalog manager, credential-vault health, enterprise grants, and cross-org diagnostics.