Online Cloud Hosts
0
Signaling Active
Active WebRTC Sessions
0
Direct P2P Encrypted
Registered API Keys
0
IP & Origin Whitelisted
Public Gateway Isolation
Protected
Zero unauthenticated exposure

Connected Host Nodes

Host daemons connected via reverse WebSocket introduction line

Host Name / Machine ID Status Active Streams Protocol Actions
Scanning cluster for active host daemons...

API Key Management

Issue scoped machine credentials with origin, caller URL, and CIDR/IP whitelisting

Key Identifier Token Prefix Granted Permissions Origin Whitelist Status Last Used Actions
Loading API keys...

Active WebRTC Streaming Sessions

Live peer-to-peer pipelines between browsers and cloud hosts

Session ID Target Host Status Transport Actions
Querying active WebRTC stream lines...

Developer API Reference & Live Playground

Test REST endpoints in real-time and export production-ready code samples

POST /api/admin/links/generate

Response

Waiting for request
Click "Send Request" to invoke the live API endpoint...

                

Master Password & Credentials

Rotate root administrator password and invalidate existing sessions

Security Posture & Controls

Active defenses on the production cluster

Rotating JWT Token Family
15-minute access tokens with family reuse detection and automatic invalidation.
Brute-Force Lockout Active
5 failed password attempts triggers automatic 15-minute IP lockout with Retry-After header.
Coturn Anti-SSRF Protection
Private RFC 1918, loopback, and cloud metadata subnets blocked from TURN relaying.
Persistent Single-Use Token Store
Redeemed JTIs are written to atomic disk storage, preventing replay attacks across restarts.