The dashboard
What each dashboard screen does: sessions, workflows, runs, credentials, pools, the audit log, usage, API keys and SSO, and which actions an owner keeps.
Last updated:
One API, two ways in
The dashboard at /app is a customer of the same API your code uses. When you sign in, the control plane mints a per-user API key bound to your browser session; every screen calls /v1/* with it, so what you can do there is exactly what your role can do over the API, and the audit log attributes a click to you by name. The key is hidden from the API keys list, expires with your sign-in, and is revoked when you sign out.
The screens
| Name | Type | Description |
|---|---|---|
Sitzungen
|
screen | Open sessions with a live view; an owner can take the mouse for an MFA hand-off. `GET /v1/sessions`, `POST /v1/sessions/:id/watch-link`. |
Workflows
|
screen | Every published workflow: versions, drift health, triggers with their firings, open heal proposals. *Starten* creates a session and starts a run; the session is released when the run ends. |
Läufe
|
screen | Workflow runs and agent tasks across the organisation with their `endedBy`; a run’s detail shows each block, its screenshot and lets you cancel. |
Anmeldedaten
|
screen | Vault credentials by name and metadata. Create with fields and an optional TOTP seed; revoke. Never a value read back. |
Pools
|
screen | Reserved browsers: create, resize, rename, delete. |
Protokoll
|
screen | The action log with a session filter and paging, the seals, *Versiegeln*, and the export bundle for download. |
Verbrauch
|
screen | The usage endpoint drawn: month picker, four totals, a daily chart, open sessions, included quota. |
API-Schlüssel
|
screen | Plain keys (owner-only to create) and *Verbundene Apps*: OAuth grants, with *Trennen* to revoke one. |
Unternehmens-Login
|
screen | SSO/OIDC for dashboard accounts. |
Owner and member
Plain API keys are not people and carry no role: they are unrestricted.
| Name | Type | Description |
|---|---|---|
member
|
role | Reads everything, runs tasks and workflows, pauses and resumes triggers, adopts or rejects heal proposals, releases sessions, watches live views read-only. |
owner
|
role | Everything a member can, plus: create and revoke credentials; create, delete and rotate triggers; create, change and delete pools; publish workflows; seal the audit log; create API keys; take the write lease in a live view. |
Note · Screenshots expire
A run’s block screenshots are artifacts under the retention window (72 hours by default). After that the run detail shows *abgelaufen* where the picture was.