Settings

Public access boundary and operator-action routing

Public UI Boundary

AgentUI public pages expose read-only status, local drafts, render previews, discovery, and packet preparation. Credential entry, credential inventory, credential creation, registry mutation, workflow execution, publishing, and approval decisions are not exposed from this dashboard.

Operator Actions

Workflow mutation

Use the authenticated REST API from a trusted service.

Run execution

Use the workflow run API and require target-service confirmation.

Approval decisions

Use approval API routes; this UI is status-only.

Credential inventory

Use server-side operator tooling, not the public dashboard.

Publishing

Prepare packets here; publish only after target service confirmation.

Registry mutation

Route through Catalog or the relevant service owner.

Public Access

  • Public: landing, builder shell, public workflows, templates, gallery, docs, health, discovery, MCP introspection, and public-safe run summaries.
  • Local: non-sensitive workflow drafts are stored in IndexedDB only when the browser user chooses local draft mode.
  • Operator-only: mutating and execution actions remain available through authenticated APIs, not public UI controls.