Skip to main content
The dashboard is the operator surface for abadge. It runs at abadge.io (or your self-hosted deployment) and is built with Next.js App Router.

​
Layout

The sidebar groups every page under the active organization: The active organization is shown in the sidebar org switcher. Switch organizations from the switcher; every subsequent action targets the new active org. The Overview leads with a posture banner that reflects the active workspace. A team organization runs in custody mode: you manage permissions and audit access on behalf of your users and the dashboard never reveals plaintext. A personal account is framed as your own vault — you own every secret and can reveal your own values from an item’s page. See Items.

​
Overview page

​
When to use the dashboard vs the CLI

The dashboard does not run the CLI’s local daemon. Zero-knowledge decryption in the dashboard happens in browser memory. For high-security operations, prefer the CLI plus daemon.

​
Browser trust model

When you unlock a zero-knowledge profile in the dashboard, the browser derives the KEK from your profile password (Argon2id) and unwraps the root key into JavaScript memory. The key is lost when the tab closes.
The browser is more exposed than the CLI: a successful XSS attack can steal the unlocked root key. Use the dashboard for management, but reach for the CLI when you need maximum confidentiality.

​
Sections

Signing in

Email / password, Google, GitHub, and the device-code approval flow for the CLI.

Organizations

Create, switch, and invite teammates.

Profiles

Set up zero-knowledge or server-managed encryption boundaries.

Items

Store credentials with typed fields.

Agents

Register and manage automated callers.

Permissions

Grant capabilities to agents on items or whole profiles.

Audit

Inspect every action.

Vault security

Where password change, recovery, and rotation live (CLI).