Overview
Send your first receipt
Your log is empty. Put your API key where your gateway runs, point the gateway at this log, and run your agent once. The numbers show here after the first append.
Tree heads on this log are signed by our key; there is no second, independent witness yet. Every receipt you log here is checkable by anyone with your gateway's public key and ours: what a receipt proves and what it does not.
Your log
Activity
Every change to your tenant, newest first. Times are in your time zone. Hold the pointer on a time to see it in UTC.
Usage
This month
Last six months
API keys
An API key is what your gateway sends with each append. You see it one time, when you create it; we keep only its hash. To rotate without a gap, create the new API key before you revoke the old one.
Shown once.
| label | created | last used | state |
|---|
Policies
Publish each Cedar policy version that your gateway loads, and the policyDigest of a receipt reads as its name, such as "refunds-v3". Enforcement stays on your machines: the gateway never reads this page. How policy names work
| name | digest | bytes | published | by |
|---|
Match a receipt
Paste a receipt file, or just its policyDigest, to see which published version decided it.
Members
Each member has one role. The list of choices explains each role. An invited person creates an account with the invited address, verifies it, and accepts on the first screen. An invite is good for seven days.
| member | role | joined | two-step |
|---|
Pending invites
| role | invited by | sent |
|---|
Account
Two-step sign-in
Two-step sign-in is off. With it on, a password or a GitHub or Google sign-in is followed by a six-digit code from an authenticator app (TOTP).
Scan this QR code with your authenticator app, then type a code from the app.
Cannot scan? Type this secret into the app by hand:
Show the setup address
Your recovery codes, shown once. Keep them in a safe place. Each code works one time in place of a code from the app, if you lose your phone. We keep only their hashes.
Password
A change signs out every other session of this account. An account made through GitHub, Google, or single sign-on has a random password that nobody knows.: to set one, sign out and use Forgot password? on the sign-in page.
Billing
The prices and limits are the same as on the pricing page. No plan has an availability commitment yet.
Export
Everything the log holds about you, any time, with your key: every leaf hash as a log file the verifier reads offline, the signed head, the published keys, the checkpoints, your usage, and the actions taken on your tenant. It checks itself before writing.
Setup
How to connect a gateway or SDK to your log, what to hand your auditors, and how to take your data. The same sheet you saw at registration.