Skip to main content

Admin Dashboard

The admin dashboard provides visibility into usage and full control over sessions, conversations, and admin accounts.

Accessing the dashboard​

Navigate to /admin. On first run you will be redirected to /admin/setup.

First-time setup​

When no admin account exists, Nibchat generates a one-time bootstrap token and prints it to the server logs:

docker compose logs server | grep "Bootstrap token"

Visit /admin/setup, enter the token, and create your first admin account. The token is invalidated immediately after use.

Dashboard pages​

Overview​

Key metrics at a glance:

  • Total sessions
  • Active sessions in the last 7 and 30 days
  • Total conversations
  • Total messages

Sessions​

A table of all anonymous user sessions with:

  • Session ID
  • Creation date
  • Conversation count
  • Last active date
  • Delete button (cascades to all conversations and messages in that session)

Click a session row to expand and browse its conversations.

Conversations​

View the full message history of any conversation, including assistant messages, tool calls, and tool results.

Delete individual conversations without affecting the rest of the session.

Admin accounts​

Manage admin users:

  • View all admin accounts with creation dates
  • Add new admin accounts (email + password)
  • Delete admin accounts (you cannot delete your own account)
  • Change your own password

Security​

  • Admin sessions are stored in the database with a 24-hour TTL.
  • Passwords must meet complexity requirements: minimum 8 characters with uppercase, lowercase, a number, and a special character.
  • The admin cookie is HttpOnly and SameSite=Lax.
  • All admin API routes require a valid session cookie.