Usage › Web config app
Web config app
Opening the web app
In chat, run /agent web — starts the web app if needed and opens the tunnel — or send /start login in a DM to the bot (Slack: !start login) to get a one-time login link valid 5 minutes.
Pages
| Group | Pages |
|---|---|
| Operate | Dashboard |
| Build | Agents, Skills, Rules |
| Reference | Specs, Plans |
| Machine · global | Monitor, Logs, AI models, Integrations |
The Integrations page
The Integrations page (under Machine) manages webhook channels: creating an id, picking pull / callback / connector mode, setting an owner, revoking. It also manages gateway credentials (the Gateways card, PUT/DELETE /api/gateways/<name>/config). See the Integrations and Connector pages for the endpoint and creation-API details.
Security
- It’s exposed through a cloudflared quick tunnel; the binary is downloaded once, pinned to a version + SHA-256, and never run unverified.
- A login token is single-use and expires after 5 minutes → a fixed 30-day session.
- Only a SHA-256 hash of the token and the session id are stored;
/loginrate-limits by IP and checks Origin. - “Log out everywhere” revokes every session.