Super admin access

Platform operator only: your account needs admin or superadmin in public.user_roles (granted in the database — not org owner, not workspace “admin” in the UI). Operators: see docs/ADMIN_BOOTSTRAP.md in the repo (npm run admin:grant-superadmin, admin:bootstrap-superadmin, or promote-app-admin).

Platform operations

Super admin

Unified operations, directory, billing controls, AI observability, and messaging (email center ships next). One place to run the platform.

Live Last refresh: — Server-enforced JWT admin role; browser cannot elevate privileges.

Trader app

Platform pulse

Live process counters + DB counts + 24h AI telemetry (GET /api/admin/metrics/summary).

AI / Search billing (request org context)

Credits for the org resolved on your JWT. Admin chat logs admin_ops telemetry only.

—

Use Open for a side panel with subscription, AI/Serper credits, top-ups, and shortcuts to Billing and Messaging.

Open loads profile, org memberships, security events, and recent AI usage in the side panel.

Credits & usage snapshot

Read-only view from GET /api/admin/directory/orgs/:orgId/billing (entitlements, ledger, Serper meter, recent top-up purchases).

Organization UUID

Subscription tools

Uses /api/billing/admin/*. JWT mode: same session as this page. Legacy deployments need x-admin-key via API client.

Sync subscription (org UUID) Or Stripe sub id

Revoke / cancel (org UUID) Immediate cancel (requires confirm)

Runtime flags

Mirrored from Settings so subscription tools, snapshots, and flags stay on one tab (PATCH /api/billing/admin/runtime-flags).

—

Disable founder checkout

Billing audit log

GET /api/billing/admin/audit — optional org filter, CSV export, full row JSON. The Audit log tab has the same filters for a full-page view.

AI memory (prompt logs)

User intelligence

Compose (SendGrid)

Recipients resolve from user_profiles.email_snapshot. Max 500 per send. Preview first, then confirm send.

Audience User or org UUIDs (one per line or comma-separated) Subject Body (plain text, required) Optional HTML body (trusted operator HTML; leave blank to send escaped plain text only)

In-app notification

Delivers to the user’s terminal bell (POST /api/admin/user-notifications). Requires user_profiles row and migration 066_user_in_app_notifications.sql.

User UUID Org UUID (optional) Title Body

Recent campaigns

Provider control-plane contracts (XFlow)

Collector eligibility from GET /api/admin/provider-contract/collector-matrix (uses live /config). Validate arbitrary JSON with POST /api/admin/provider-contract/validate — responses include missing fields, unrecognized keys, and type errors.

Open this tab to load collector diagnostics…

Billing & subscriptions

Stripe sync/revoke, credit snapshots, runtime flags, and billing_audit_log export live on the Billing tab (same /api/billing/admin/* session).

Equity curve (sample)

AI operational manager

System events

AI decision records

Raw overview (sections)

Rows from billing_audit_log via GET /api/billing/admin/audit.

Runtime flags

Founder checkout gate. Requires billing admin access. The same control is on the Billing tab.

—

Disable founder checkout