Admin Dashboard API

Cloud-agnostic, Docker-ready Express.js backend for the FastStart admin dashboard.

Features

• Full REST API for environments, insights, agents, pipelines, prompts, signups, tasks, and more
• JWT authentication with pluggable providers (Cognito, Auth0, Okta, Keycloak)
• All AWS SDK v3 calls preserved (DynamoDB, S3, STS, Organizations, CloudFormation, SSM, CodePipeline, etc.)
• Request logging with pino
• Graceful shutdown
• Docker multi-stage build
• GitHub Actions CI/CD with GHCR

Setup

npm install
cp .env.example .env
# Edit .env with your configuration
npm run dev

Configuration

All configuration is via environment variables. See .env.example for the full list.

Variable	Description	Default
PORT	Server port	3000
AUTH_PROVIDER	cognito or oidc	cognito
AUTH_ISSUER	JWT issuer URL	—
AUTH_JWKS_URI	JWKS endpoint URL	—
AWS_REGION	AWS region	us-east-1
CORS_ORIGIN	CORS allowed origin	*

Docker

docker build -t admin-api .
docker compose up

API Endpoints

Health

• GET /health — Health check (unauthenticated)

Environments

• GET /api/environments — List all environments
• POST /api/environments — Create environment
• GET /api/environments/:id — Get environment details
• DELETE /api/environments/:id — Close environment
• GET /api/environments/:id/connect — Connection instructions
• GET /api/environments/:id/console-credentials — Console credentials
• POST /api/environments/:id/access-keys — Generate access keys
• POST /api/environments/:id/email-keys — Email access keys
• GET /api/environments/:id/ssm-url — SSM session URL
• GET /api/environments/:id/stack-progress — Stack deployment progress
• PATCH /api/environments/:id/display-name — Rename environment
• GET /api/environments/:id/messages — Chat messages

Insights

• GET /api/insights/security — Security findings
• GET /api/insights/costs — Cost breakdown
• GET /api/insights/tokens — Token usage
• GET /api/insights/quotas — Quota status
• GET /api/insights/litellm — LiteLLM overview
• GET /api/insights/litellm/keys — Usage by key
• GET /api/insights/litellm/models — Usage by model
• GET /api/insights/litellm/timeline — Usage timeline

Agent

• POST /api/agent-send — Send prompt/command to agents
• GET /api/agent-history/:accountId — Command history
• GET /api/agent-result/:accountId/:commandId/:instanceId — Command result

Signups

• GET /api/signups — List signups
• POST /api/signups/:id/approve — Approve and provision
• GET /api/signups/:id/check — Check for conflicts
• PATCH /api/signups/:id/status — Update status
• GET /api/signups/:id/template — CloudFormation template URL
• DELETE /api/signups/:id — Delete signup

Keys (Bedrock)

• GET /api/keys — List keys
• POST /api/keys — Create key
• PATCH /api/keys/:id/deactivate — Deactivate key
• PATCH /api/keys/:id/activate — Activate key
• GET /api/keys/:id/usage — Key usage
• DELETE /api/keys/:id — Delete key

LiteLLM

• GET /api/litellm/keys — List virtual keys
• PATCH /api/litellm/keys/:token/budget — Update budget

Prompts

• GET /api/prompts — List prompts
• POST /api/prompts — Create prompt
• GET /api/prompts/:id — Get prompt
• PUT /api/prompts/:id — Update prompt
• DELETE /api/prompts/:id — Delete prompt

Tasks

• GET /api/tasks — List tasks
• POST /api/tasks — Create task
• PUT /api/tasks/:id — Update task
• POST /api/tasks/:id/move — Move task
• DELETE /api/tasks/:id — Delete task

Pipelines

• GET /api/pipelines — List pipelines
• GET /api/pipelines/active-tasks — Active task IDs

Dashboard

• GET /api/dashboard/stats — Aggregated stats

Bootstrap

• GET /api/bootstrap/brain — List brain templates
• GET /api/bootstrap/brain/:filename — Get template file
• PUT /api/bootstrap/brain/:filename — Update template file
• GET /api/bootstrap/scripts — List bootstrap scripts
• GET /api/bootstrap/scripts/:filename — Get script content
• PUT /api/bootstrap/scripts/:filename — Update script

Misc

• GET /api/reveal/:token — Redeem one-time key link
• POST /api/loki/wake — Trigger Loki heartbeat
• GET /api/apps — List apps from registry