Admin UI

The admin UI is the main way to manage open-cli-toolbox.

Open it at:

http://127.0.0.1:8765/admin

The bundled stack signs in through Authentik. For Docker quickstart installs, the initial account is:

Email: admin@open-cli.local
Password: open-cli-admin

Use the UI to manage:

• MCP Registry installs
• Manual MCP servers
• OpenAPI imports
• Source validation and discovered tools
• Tool enable/disable controls
• Catalog bundles and Authentik user/group assignments
• Publish/revision flow backed by runtime snapshots
• Authentik-backed admin access
• User self-service install pages
• Audit events
• Toolbox customization and settings

Authentik Defaults

The Docker stack creates an Authentik OIDC application for the admin UI and an open-cli-admins group. Users in that group can call /v1/admin/... APIs.

For shared deployments, provide the initial admin email/password with deployment secrets and change the password after first sign-in.

User Portal

Users sign in through the same /admin entrypoint. Non-admin users land on self-service pages instead of admin pages:

• My Tools shows only tools assigned to their Authentik user or group.
• Install open-cli provides the runtime URL and CLI command.
• Install MCP Client provides a hosted /mcp configuration using the user's bearer token.
• Token/Auth Status verifies the current identity and role.

Recovery

The normal login path does not require copying a token from logs. Recovery token support is reserved for broken-auth situations and must be explicitly configured by the operator.