Operator login

This is a high-entropy operator token, not a password.

Operator token

Have an invite? Create your account.

The token is verified against its keyed BLAKE3 digest in constant time. A successful exchange sets an HttpOnly, SameSite=Lax session cookie and binds a CSRF token to it. Agents never use this screen — they present mm_ bearer tokens to the API.