MatrixArk

Management Portal

Operations Access Ingestion API

User Backend Portal

Registration, API-key application, agent setup, scoped context inventory, topology, metrics, and audit in one MatrixArk backend view.

loading
Users1local, SSO, or service principals
API Keys2active, expiring, revoked
Context Graph7nodes with summaries
Ingested Items12messages, resources, skills

Quick Start

Memoria-style onboarding for coding agents: sign in, get a key, connect MCP, verify memory calls.

1Register or sign in

Use Google/Gmail, GitHub, Okta, Azure AD, or local login. MatrixArk maps the external subject to an internal user.

2Apply for key

Issue a scoped API key for context ingest/retrieve/feedback/replay, resources, and skills.

3Connect agent

Copy the one-liner or HTTP MCP snippet for Codex, Claude, Cursor, Kiro, or generic MCP clients.

4Verify

Ask the agent to retrieve MatrixArk context or list resources. The portal shows key usage and audit logs.

Account Control Plane

Production signup, SSO, API-key lifecycle, RBAC, and tenant isolation flows for local, cloud, and hybrid deployments.

production

Auth Readiness

Operations Command Center

Shared SLOs, token efficiency, backend health, ingestion lag, summary freshness, and audit posture for every account and agent.

Alerts
Backend Health
Token Efficiency

Audit Posture

Security And Governance

Portal reads are scoped before data is returned. API keys are returned once, stored as hashes, and every admin, key, SSO, replay, and portal operation is audited.

Governance
Scope First

Account, tenant, user, and session constraints are enforced before dashboard rows, topology, resources, skills, audits, or ContextPacks are returned.

Hash-Only Keys

Raw MatrixArk API keys are only shown at creation. Metadata stores api_key_hash plus key id, role, scopes, allow-lists, status, and expiration.

Audit Everywhere

Admin actions, key operations, SSO mapping/login, portal reads, backend metrics, retrieval, feedback, replay, and denied auth attempts produce audit records.

Roles And Service Keys

Human rolesowner / admin / operator / developer / viewer
Agent keysservice or local_agent with scoped capabilities
Isolationallowed_user_ids and allowed_session_ids
Portal scopeportal:read

Prometheus Observability

Backend metrics panels for C++ and Rust with storage mode, readiness, token pressure, import lag, model fallback flags, and audit write health.

Prometheus

Alert Posture

Model Fallback Flags

Metadata Store

Account, tenant, user, SSO, API-key, and admin audit metadata can live in record-log local mode, MySQL, MatrixKV SQL, or the legacy ByteKV SQL alias. Context records, embeddings, resources, and skills still live in TemporalStore.

Runtime env

            
SQL schema

            
Policy

          

        

        

          
Active Metadata Backend

          

        

      


      

        

          
Registration, SSO, And API Keys
Register local users, link Gmail/GitHub/enterprise SSO, issue scoped keys, rotate/revoke them, and inspect redacted inventory without exposing raw key material.

          

            
Production signupCreate account, tenant, user, first scoped API key, and audit record in one trusted onboarding flow.

            
SSO callbackTrusted Google/Gmail, GitHub, Okta, or Azure AD gateways send verified claims; MatrixArk stores mapped identity metadata only.

            
Email / password loginUsers who registered without SSO sign in with email + password. MatrixArk verifies a salted PBKDF2-SHA256 hash and never stores the plaintext.

            
Link external identityStore the provider subject and email without trusting caller-supplied user ids blindly.

            
Apply for API keyOne-call onboarding for coding agents and service workers.

            
Key lifecycleCreate, list, rotate, revoke, expire, and inspect redacted keys with scopes, allow-lists, last-used time, and usage count.

            
Policy decisionEvery context call is checked against account, tenant, user, session, role, scopes, and key state.

          

        

        

          
Portal Request

          

        

      


      

        

          
Token And Usage Monitoring
Track prompt pressure, selected versus dropped context, API-key usage, and per-stage latency from the same portal.

          

        

        

          
Cost And Limits

          

        

      

      

        

          

            

              
Context Debugger

              
Inspect what Codex exposed locally, what MatrixArk retrieved remotely, how tokens were spent, and why refs were selected or dropped.

            

            debug
          

          

          

            

              Codex Local Context Visibility
              

            

            

              ContextPack Token Accounting
              

            

            

              Pipeline Stage Timings
              

            

            

              Selected And Dropped Refs
              

            

            

              
ContextPack Audit Debugger

              

            

          

        

        

          
Debug Commands

          

          

          
        

      


      

        

          
Agent Install Snippets
Copy one command or an HTTP MCP config. Agents send what they know; MatrixArk resolves and enforces final identity.

          

            
One-liner installer

            
HTTP MCP config

            
Verify command

          

        

        

          
Identity Resolution

          

        

      


      

        

          
Ingestion And Access History
Paged tables for messages, resources, skills, events, entities, ContextPacks, users, keys, and audit records.

          
Live paged tablepage 0

          

            
            
          

          

            
            
            
            
            
            
            
            
            
          

          

        

        

          
Selected Record

          
Select a row to inspect metadata.

        

      


      

        

          
Context Topology
Filesystem-like ContextNode graph for this user/agent, with summaries, embeddings, resources, and skills attached to scoped nodes.

          

        

        

          
Topology Backing Records

          

          
Metrics And Audit