Sign in

Operator console login. Source names and feed URLs stay here — they are not shown on the public UI or public APIs. Programmatic clients continue to use X-API-Key.

Operator overview

App status

Loading runtime status…

—

Application

—

Database

—

Scheduler

—

Tasks

—

HTTP monitor

—

Mail

—

Status—

Sources—

Enabled—

In error—

IoCs—

Whitelist—

Last runs

Recent scheduler / ingest outcomes across sources

When	Source	Outcome	Created	Updated	Duration

Loading runs…

Last ingestions

Latest activity per source

Source	Last run	Outcome	IoCs	Next

Loading ingestions…

Errors & failures

Actionable detail — message, source, time, related run

Loading errors…

Sources

Manage feeds, trigger ingest, open per-source ops

Name	Integration	IoCs	Enabled	Last run	Last error	Status	Actions

Loading…

Source ops

Last run

Last error

—

Counters

Recent runs

Started	Status	Created	Updated	Errors	Duration	Error

Integration logs

Select a source to load logs.

GitHub paths + promote

Select include paths from the local mirror, save them, preview IoC counts, then promote into merged iocs. Scheduled ingest pulls + re-scans.

/ 0 selected

	Name	Type	Size

Preview counts

Saved paths

—

Sample hits

Type	Value	Path	Line

Purge merged IoCs

Remove this source’s contributions from the merged iocs collection and category projections. Raw / platform collections are left untouched. The source record itself is not deleted.

Add source

Name Type URL Integration key Refresh interval (seconds) Trust score Enabled Extra metadata (JSON)

Integration inventory

IoCs in the merged store, attributed per integration → source

Integration	Sources	IoCs	Health

Loading integration totals…

Whitelist

Operator allow-list — matching IoCs are dispositioned whitelisted and excluded from public browse/export by default

Whitelisted indicators stay in the store for audit, but public /ui, /export/*, and non-admin /iocs omit them unless include_whitelisted=true.

Type Scope Enabled

Type	Value	Scope	Reason	Expires	Enabled	Actions

Loading whitelist…

Add entry

Type Value Scope Scope ref Reason Expires (optional) Enabled

Bulk add

Paste one value per line, or CSV-ish: type,value[,reason] / type,value,scope,reason[,expires_at]

Default type (for bare values) Default scope Default reason Paste list

IoCs · add to whitelist

Recent indicators (admin view includes disposition). Add allow-list entries without leaving ops.

Type Disposition

Type	Value	Score	Disposition	Last seen	Actions

Loading IoCs…

Admins

Mint single-use invite links. Redeem creates an additional admin; existing admins stay.

Invites

Pending, used, and revoked invite metadata (no raw tokens)

Status	Created	Expires	Note	Created by	Used by / at	Actions

No pending invites. Mint a link when you need to add an operator.

Admin users

Equal-privilege operators (read-only this wave)

Username	Created	Source	Status

Loading admins…