Admin
The admin area (/admin) is gated to users with the admin flag. It provides a user registry and the platform-level settings that control AI behavior.
/admin/users is a CRUD registry of accounts. Admins can:
- List users with their profile state (complete/incomplete, scan status).
- Create, edit, and delete users.
- Toggle the
adminflag. - Operate on behalf of any user (start/stop their scans, view their dashboard).
Settings
Section titled “Settings”/admin/settings manages the two PlatformSetting keys:
AI provider (ai_provider)
Section titled “AI provider (ai_provider)”The source of truth for AI configuration (environment variables are fallbacks only):
| Field | Purpose |
|---|---|
enabled |
Master switch (when configured) |
provider_type |
openai, anthropic, google, or a custom base_url |
api_key |
Provider key (fallback to env if empty) |
base_url |
OpenAI-compatible endpoint override |
default_model |
Model to use |
max_tokens |
Output cap |
temperature |
Sampling temperature |
See AI providers.
Audit configuration (audit_config)
Section titled “Audit configuration (audit_config)”| Field | Default | Purpose |
|---|---|---|
threshold |
medium |
Minimum severity the AI audit reviews |
adjustment_min |
-15 |
Lower bound for score adjustments |
adjustment_max |
15 |
Upper bound for score adjustments |
See AI Audit.
Audit events
Section titled “Audit events”All admin actions and platform lifecycle events are recorded as audit events and visible on the dashboard’s audit log.