🛠️ Genesis DevTools

Register New App

Registered Apps

Loading apps...

Run Tests

Test Results

No tests run yet.

Test History

Click "Load History" to view results.

Static analysis: Call-site scanner

Scan workspace apps for HTTP route registrations (app.METHOD / router.METHOD) and write the default call-stack tree into DevTools memory. Specify the branch path where results are stored, then run the scan and view what was filled.

Results are stored under this path. Use a single name (e.g. call_sites) or a path (e.g. scans/latest).

What was filled

Load and view the branch contents from DevTools memory.

Documentation

Read DevTools and workspace docs from the app. Choose a document below to view it here.

Select a document to view.

Security Status Checker

Check the security status of registered apps and identify which authentication methods are enabled.

Security Check History

Click "Load History" to view results.

Admin Authentication Setup (Custody)

Set up public/private key pair authentication for Custody as an alternative to Firebase. Recommended: Use public/private key pairs for better security. Note: Once a key is injected, DevTools web UI will be disabled by default for security.

🔐 Public/Private Key Pair (Recommended)

Generate a cryptographic key pair. The public key is stored in Custody (safe to store). You keep the private key secret and use it to sign authentication tokens.

🔑 Legacy: Shared Secret Token (Not Recommended)

This is a simple shared secret (password-like). Less secure than key pairs.

Custody Authority Setup (App-Wide Auth)

Set up the Custody session-signing keypair. This allows all apps to verify that tokens actually came from Custody.

🆔 Custody Session Authority

The private key stays in Custody. The public key is injected into EVERY app so they can verify Custody's signature.