Settings
Public access boundary, operator key checks, and protected API-key management
Protected Boundary
Public AgentUI pages and discovery files are readable without a user account. Mutating, execution, approval, publishing, registry mutation, reporting, and sensitive inventory actions require PLATPHORM_API_KEY.
Kept in memory only. AgentUI does not persist platform keys in browser storage.
API Keys
API key inventory and creation are protected platform actions. Public users can inspect this boundary without exposing keys.
Active Keys
No key inventory loaded. Provide PLATPHORM_API_KEY to inspect protected inventory.
Public Access
- Public: landing, builder shell, public workflows, templates, gallery, docs, health, discovery, MCP introspection, and public-safe run summaries.
- Protected: workflow mutation, workflow execution, approval decisions, publishing, registry mutation, reports, and sensitive inventory.
- Local: non-sensitive workflow drafts are stored in IndexedDB only when the browser user chooses local draft mode.