Settings
Public access boundary and operator-action routing
Public UI Boundary
AgentUI public pages expose read-only status, local drafts, render previews, discovery, and packet preparation. Credential entry, credential inventory, credential creation, registry mutation, workflow execution, publishing, and approval decisions are not exposed from this dashboard.
Operator Actions
Workflow mutation
Use the authenticated REST API from a trusted service.
Run execution
Use the workflow run API and require target-service confirmation.
Approval decisions
Use approval API routes; this UI is status-only.
Credential inventory
Use server-side operator tooling, not the public dashboard.
Publishing
Prepare packets here; publish only after target service confirmation.
Registry mutation
Route through Catalog or the relevant service owner.
Public Access
- Public: landing, builder shell, public workflows, templates, gallery, docs, health, discovery, MCP introspection, and public-safe run summaries.
- Local: non-sensitive workflow drafts are stored in IndexedDB only when the browser user chooses local draft mode.
- Operator-only: mutating and execution actions remain available through authenticated APIs, not public UI controls.