Skip to main content
This page documents the engine dashboard — the Alpine.js SPA served by the mesh host on :8420. For the managed-hosting account dashboard (Next.js, Vercel), see the Managed Hosting docs.
OpenLegion includes a built-in web dashboard for real-time monitoring, debugging, and management of your agent fleet. The dashboard is served by the mesh host at http://localhost:8420/.

​
Top-nav tabs

There are four top-level tabs. Internal IDs are frozen for URL stability; user-facing labels diverged:
The Work tab’s Kanban surface is sometimes described as a “Board” in prose. That’s a description, not a tab label — the tab is Work.

​
Chat

Multi-agent chat. Talk to one agent or fan a message out to several at once. Token-level streaming via the chat endpoint; events bypass the WS event bus for low-latency delivery.

​
Work

Operational workspace. Surfaces include:
  • Kanban — Pending / Working / Blocked / Done columns.
  • Needs-You panel — pending operator actions (soft/hard edits awaiting confirm).
  • Activity feed with pinned blockers.
  • Recently delivered — inline previews of recent agent outputs.

​
Team

Agent grid showing health, current model, token usage, and cost — organized by project. Click an agent to open a detail view with workspace editor and embedded VNC viewer for live browser sessions. Slide-over chat panels let you chat with any agent directly via SSE streaming.

​
Settings (System) — 11 sub-tabs

The Settings tab is the operational control surface. It has 11 sub-tabs:

​
Activity sub-tab specifics

  • Traces — grouped request traces showing the full lifecycle of each agent interaction. LLM prompt/response previews surfaced inline for quick debugging.
  • Live Events — WebSocket feed at /ws/events. DashboardEvent.type is a Literal of 50 event names (task assignments, pub/sub fan-outs, blackboard updates, cron fires, channel messages, browser events, etc.). The event bus is a 500-event ring buffer. Per-token text_delta events bypass the WS bus and are delivered via the streaming chat endpoint instead.
  • Blackboard — browse, search, write, and delete entries in the shared blackboard. See current inter-agent shared data.

​
Real-time updates

  • WebSocket: /ws/events (500-event ring buffer; 50 typed event names).
  • SSE: per-agent chat streams.
  • Token-level streaming bypasses the WS bus for low latency.

​
Live browser viewers

Click any agent with browser activity to see a live VNC view. The dashboard proxies through /agent-vnc/{agent_id}/{path}. The proxy rejects agent Bearer tokens and requires the ol_session cookie on both HTTP and WebSocket upgrade — agent credentials can’t leak through a browser session.

​
Accessing the Dashboard

The dashboard starts automatically with openlegion start. No additional configuration needed on a self-hosted install.
Authentication:
  • Dev / self-hosted — open by default if /opt/openlegion/.access_token is absent.
  • Managed hosting — gated by an ol_session cookie (HMAC-verified, 24h max age + 5-min skew). The SSO callback /__auth/callback lives in the upstream Caddy auth-gate sidecar, not in engine code — the engine only consumes the cookie.
CSRF: state-changing dashboard endpoints require the X-Requested-With header. If you’re calling dashboard APIs programmatically, set it.

​
Tech stack

Alpine.js SPA + Tailwind CSS via CDN — no build step. Jinja templates with autoescape=True (the primary XSS defense, since the CSP allows unsafe-inline). Real-time updates over WebSocket and SSE.