Unobits — Superadmin Control Center

MRR & Revenue

—

Committed Monthly

Active Customers

—

Total Orgs

Revenue at Risk

—

Past due renewals

AI & Storage Burn

—

Tokens + R2 Bytes

Requires Immediate Attention

Live incident briefing: payment failures, support queues, resource spikes, and operational bottlenecks.

0 issues

Scanning system health and action items…

Recent Organizations

Newly onboarded tenant accounts.

Organization	Owner	Created
Loading…

Storage Leaders

Organizations consuming the highest R2 bucket storage.

Loading

—

Plan Distribution

Tier breakdown across organizations.

Loading

—

Quick Shortcuts

Jump directly to admin console tools.

New organizations

—

Last 30 days

New users

—

Last 30 days

Active sessions

—

Currently valid

Disabled users

—

Across all orgs

Integrations

—

Events in 7 days

Active calls

—

Ringing + active now

Websites

—

Configured site keys

SEO ingest queue

—

Queued or pending

Traffic & service activity

Support, integration, and call patterns across the platform.

Support queue

Loading

—

Integration providers

Loading

—

Call types

Loading

—

Hot organizations

Highest integration credit usage and current operating pressure.

Loading

—

Organizations

Search, review key metrics, and update org metadata.

Organization	Owner	ID	Created	Updated
Loading…

—

Monthly recurring revenue

—

Committed, excludes comps

Revenue this month

—

Subscriptions + top-ups

Paying subscribers

—

Active plans

At risk

—

Past due in grace

Payment provider

The account Unobits collects into. Renewals and refunds run through it.

Checking…

Revenue

Paid charges per calendar month.

Loading…

Recent failures

Declined renewals in the last 30 days.

Loading…

Subscribers

Who is paying, who lapsed, and who was comped.

Organization	Status	Plan	MRR	Card	Renews
Loading…

—

Charges

Every attempt against the platform account, newest first.

When	Organization	Kind	Amount	Status	Reference
Loading…

—

Users

Search users across all orgs, view sessions and memberships, and manage access.

User	ID	Orgs	Active sessions	Last login	Created
Loading…

—

SQL query

Use parameter binding by providing a JSON array in Bind.

Bind (JSON array)

Status

Idle

—

R2 storage browser

List, inspect, and delete objects from your R2 bucket. Use prefixes to scope results.

—

	Key	Size	Uploaded
Enter a prefix and click Load.

Open tickets

—

Awaiting action

Pending tickets

—

Replied / in progress

Waiting on customer

—

Awaiting customer reply

Resolved / closed

—

Handled tickets

Support workspace

Review tickets, reply, assign, and resolve without leaving the portal.

Select a ticket

Open a ticket from the queue to review the thread and respond.

—

Docs library

Manage documentation and knowledge files used across the app and Donna training flows.

Object key

Content type

No document selected.

Content

Runtime readiness

Bindings, bootstrap state, and key platform counts.

Bindings

Loading

—

Bootstrap

Loading

—

Counts

Loading

—

Environment & schema

Quickly spot missing env vars, partial services, or schema gaps.

Issues

Loading

—

Environment

Loading

—

Tables

Loading

—

Raw diagnostics payload

Exact JSON returned from the diagnostics endpoint.

Loading…

Logins

—

Last 24 hours

Logins

—

Last 7 days

Admin session TTL

30d

Default configuration

Auth factors

OTP + Turnstile

Mitigates abuse

Logins by organization

Session creations grouped by org over the last 7 days.

Org	Logins (7d)	Share

Operational notes

Quick reference for how this console authenticates and what to check during incidents.

Admin session cookie
Uses admin_sess (HttpOnly, Secure, SameSite). Sessions are stored in admin_sessions.
OTP verification
Codes are hashed before storage (admin_otp) and rate limited via attempts + TTL.
Turnstile protection
OTP start validates Cloudflare Turnstile to reduce automated abuse.
DB & storage tools are privileged
Use Data Explorer carefully. Prefer SELECT before running destructive statements.

Donna configuration

Live overrides for Donna's engine. Stored in the database and applied immediately — no redeploy. Leave a field blank to fall back to the environment / built-in default.

Provider API key — Default model Users still toggle AI Max (pro) per chat. This is the default/AI Mini model. Donna instructions (system prompt) Private memory (never revealed verbatim to users)

Monthly token allowance per user (by plan)

Override the per-tier default budget. Blank = built-in default. Type a number, or unlimited for no cap. This sets how much Donna each user gets before hitting their cap.

Small Business default — Medium Scale default — Enterprise default —

Cost per action (route multipliers)

Tune how much each Donna action charges against a user's monthly allowance. 1.0 = full cost, 0.5 = half, 0 = free. Lower a route here if it's charging users too much — applied live, no redeploy.

Loading routes…

Donna Deepmind (own reasoning engine)

Donna's own reasoning brain on Cloudflare Workers AI (edge) + your Hetzner VPS (heavy). When it's on and reachable, the specialized modes (Tool / Research / Planning / Code) think here instead of billing Gemini — Gemini still voices the result. Off or unreachable → specialized modes fall back to the full Gemini loop. Read live, no redeploy.

Loading status…

Engine Enabled Master switch. The AI binding (edge) or a VPS URL (heavy) must exist for it to actually engage. Edge model (Workers AI) Must support function-calling. Blank = built-in default. Heavy model (VPS) OpenAI-compatible model id served by the VPS. VPS endpoint URL OpenAI-compatible base. Calls go to <url>/v1/chat/completions. Blank = heavy tier off (edge only). Access service-token ID Optional — only if the VPS is behind Cloudflare Access. Access service-token secret — Split memory Enabled Grounds specialized turns in this user's prior work and records each turn. Episodic memory needs only D1; semantic recall needs a VECTORIZE binding. Embedding model Workers AI model for semantic recall. Blank = built-in default. Code sandbox Enabled Routes run_code (and the Code mode) to the VPS sandbox instead of the in-Worker JS runner. Needs the VPS URL set. Sensitive — executes code. Proactive Donna Enabled Lets the engine generate unsolicited nudges. Outward-facing — off by default. Delivery to users is wired separately; use Preview to see sample output.

Token usage

Donna consumption across every organization this month. Give any user more headroom inline.

—

Loading…

Logo source

Choose which logo version the whole app serves. Favicon is the true brand mark from each company's site (via Google). Unavatar aggregates social/brand avatars. Both are crawled and stored — switching is instant. You can also pin individual apps below.

Phase — OK — Pending — Failed — Last crawl —

Registry

Every app/provider/stack-tech the app references. Pin a per-app source when one looks wrong, recheck or remove a single logo.

Loading…

Admin accounts

Manage who can access this Admin Console. The ENV-managed owner account is hidden and cannot be edited here.

Admin	Role	Sign-in	2FA	Status	Last login
Loading…

Global Outbound Email Configuration

Set your custom email provider and sender address globally for registration and verification emails. Applied immediately — no redeploy.

Resend API Key —

Sender Email (EMAIL_FROM) Must be a verified address/domain in Resend

Branded email templates

Author Unobits-branded emails with {{variables}}, preview them live, and send notifications through Resend.

Template key

Name

Subject

Heading (in body)

Button label

Button URL

Body HTML

No template selected.

Send test to

Sample vars (JSON)

Live preview