User Guide¶
The AgentOps dashboard is a single-page application (SPA) built with Vite that provides day-to-day security operations for monitoring agents, managing policies, reviewing audit logs, investigating anomalies, and processing HITL approvals.
Русскоязычным операторам
Практическое руководство на русском: Руководство оператора.
Access Requirements¶
| Role | Dashboard | Agents | Policies | Audit | Anomalies | HITL | Settings |
|---|---|---|---|---|---|---|---|
| Viewer | ✅ | ❌ | ❌ | Read | ❌ | ❌ | ✅ |
| Developer | ✅ | ✅ | Read | Read | ❌ | ❌ | ✅ |
| Security Analyst | ✅ | ❌ | Read | Read/Export | Read | Approve/Reject | ✅ |
| Admin | ✅ | ✅ | Full | Read/Export | Read | Approve/Reject | ✅ |
| Super Admin | ✅ | ✅ | Full | Full | Full | Full | ✅ |
Handbook: Viewer has no access; Security Analyst can read; Developer and Admin can compile and resolve conflicts. See Handbook.
Role-based navigation
Sidebar items are shown or hidden based on your role. If a page returns 403 Forbidden, contact your administrator to adjust your role.
Dashboard Pages¶
| Page | Route | Description |
|---|---|---|
| Dashboard | /dashboard |
KPI overview, activity chart, recent events |
| Agents | /agents |
Agent registry, semantic search, Try Prompt |
| Handbook | /handbook |
Compile norms, query, resolve conflicts |
| Workflows | /workflows |
Agent chains, templates, execute / cancel / retry |
| Cost | /cost |
Spend, budgets, hard stops |
| Marketplace | /marketplace |
Publish / install agent packages |
| Discovery | /discovery |
Shadow AI candidates → HITL confirm |
| Policies | /policies |
Policy management and templates |
| Audit | /audit |
Audit log search and export |
| Anomalies | /anomalies |
Anomaly reports and detector status |
| HITL | /hitl |
Pending approval requests |
| Guard ML | /guard-ml |
Prompt Guard model status (analyst+) |
| Pricing | /pricing |
Plan catalog (USD or ₽ by UI language) |
| Feedback | /feedback |
Product feedback; inbox is Super Admin only |
| Settings | /settings |
API key, theme, plan |
The sidebar groups items into Operate, Security, and Account. Cost and Marketplace stay hidden on the Free plan (cost_tracking, marketplace). A local demo overlay shows those tabs anyway.
Authentication¶
Password and SSO login set an HttpOnly session cookie. The SPA sends it with credentials: include. POST /api/v1/auth/login returns user and expires_in; access_token and api_key in that JSON are empty.
API clients and the optional Settings API-key field still use X-API-Key or Authorization: Bearer. JWT lifetime is ACCESS_TOKEN_EXPIRE_MINUTES (default 60). New accounts may require email verification before the cookie is issued.
Real-time Updates¶
The dashboard connects to the WebSocket endpoint for live notifications:
The browser sends the session cookie. Do not put the JWT in the query string.
Events include policy violations, anomaly detections, HITL status changes, and system status updates. The connection indicator in the header shows platform health from GET /api/v1/status.
Keyboard Navigation¶
The dashboard includes accessibility features:
- Skip link — jump to main content
- Keyboard navigation — tab through interactive elements
- Modal focus trapping — dialogs trap focus for screen readers
Common Workflows¶
Monitor Security Posture¶
- Open Dashboard for KPI summary
- Review the activity chart for unusual spikes
- Check Anomalies for ML-detected behavioral deviations
- Drill into Audit for detailed event logs
Respond to a Policy Violation¶
- A real-time toast appears when
policy.violatedfires - Navigate to Audit and filter by the agent or action
- Review the violation context and risk score
- If HITL is required, approve or reject in HITL
Manage Compliance Policies¶
- Open Policies
- Browse templates (GDPR, HIPAA, FZ-152)
- Create or edit a policy from a template
- Activate the policy and test with Policy Check (API or SDK)