​
Add a computer

1

Get the key

Run enroll-machine.bat on the new computer. It puts the public key on the clipboard.
2

Paste and add

Open the SSH machines tab. Paste the key. Click Add.
Each key is one computer. The comment on the key names the machine.

​
Remove a computer

Select the row. Click Remove. Confirm.
A row marked << THIS PC is the key of the computer you are sitting at. Removing it ends your own access from here. The tool warns harder for that row, and refuses outright if it is the last key of all.

​
Grant a door

Tick the box in that person’s row. The tool asks for a password if it does not hold one for this session.
The tool reads the state back from the server after every change. If a tick does not survive the refresh, the grant failed on the server, whatever the click appeared to do.

​
Take access away

Untick the box. The person keeps their row and can be granted access again later. The tool warns before a revoke, and warns harder in two cases.

​
Set a password

Click Pw on the person’s row. The password is written to every door that the person holds. Requirements: at least 6 characters. Use letters and digits, and use more than 6. Every door faces the internet.
Rotating the memory door mints a new cognee API key and invalidates the old one. Every machine that still holds the old key gets 401 with no other symptom: the memory simply stops answering. The new key is shown once, in a dialog. Update every machine.
Pw does not touch anybody’s LLM API key. It does set the LiteLLM admin login for herman925.

​
Delete a person

Click Del. The dialog defaults to No. It lists the doors that the person holds right now, drops every credential, and removes the roster entry so the row disappears.
If you only want to take access away, click No and untick the boxes instead.

​
Mint a reviewer token

Reviewer tokens belong to a project, not to a person, so they live on their own tab rather than in the matrix.
1

Open the Review sessions tab

Choose one project. The tab shows one project at a time.
2

Mint the session

Give the label and the validity. The choices are 7, 14, 30 or 90 days. The default is 30.
3

Send the token

The token is shown once. Send it to the reviewer with the install page address.
Existing tokens can be revoked, reissued, extended or deleted from the same tab.

​
When a column is greyed out

A greyed column is deliberate. The alternative is a click that fails, which reads as a broken tool rather than an ungranted door.

​
After any change to the tool

Read the PASS and FAIL lines. 142 checks run.
The window loads the script when it starts. Edit the file and the running window keeps the old behaviour. Close it and open it again, or your change appears to do nothing.