Create secret invite links. Each one lets someone pick a screen name and join the chat.
Opens this admin console on any device. It carries your admin token, which authorises managing the roster — it is not a decryption key, so it can't read any messages. Save it somewhere safe (e.g. a password manager).
The name is shown as the app name on a Home Screen and as the chat's title. The description greets people on their invite's welcome card and lives under ⋮ → About this space. The administrator name & contact email are optional — they're shown to members (e.g. by Eleven's welcome tour) so people know who runs the space and how to reach you.
An optional photo for this chat, shown when people are invited, while they join, and on the passkey-backup screen. Like the name, it's public branding — it isn't encrypted, so don't use anything private.
By default only you (the admin) can invite people. Turn this on to let members invite each other — each member can then start a chat with someone new and share a join link themselves. The server never sees any key either way.
Switch off the parts of the app your space doesn't want. Existing chats keep working either way — turning something off just stops new use: AI off means helpers answer commands only, bots off stops new bots being created, apps off hides them from the New-chat menu, member-made apps off keeps the built-in apps but stops members building their own.
The server can keep itself up to date. Stable is well tested and what most spaces should run; Beta gets features a little earlier; Edge is the bleeding edge. Updates install in seconds and never touch your data.
Leave empty to follow every release. With a number set, small updates keep arriving but a release crossing that major version waits for your say-so.
Adds an AI bot as a member. This mints a one-time link the agent sidecar uses to set up the bot's identity; it then appears in chats as a member with a BOT badge. The sidecar for this instance must be running.
Install custom mini-apps for this space — each is a single JavaScript module file, just like the built-in To-do or Polls. Members' open apps refresh automatically when you install or remove one.
Install only code you trust. An installed app runs its code on every member's device, with access to everything that device can decrypt — messages, names, and photos included.
Loading…
Send a test notification to everyone who has them enabled — a quick way to check delivery.
Every member's name and photo is locked with one shared key, passed member to member. If everyone who held it is gone for good, newer members stay locked out — invites included. Resetting mints a fresh key the next time anyone opens the app.
Resetting is permanent: profile photos, "about me" notes and member-built apps locked with the old key can't be recovered — people re-add them. Names come back on their own the next time each member opens the app. Open groups close to invite-only (reopen them afterwards). Messages are untouched — chats have their own keys.
Create an invite that makes the claimer an admin. They can then access this console with their device token (no need to share your admin link). Use this to share admin duties or to recover access if you lose your token.
Invite the first person with a short, single-use link (and QR) — they pick a screen name and their device makes its own keys, so the server never sees any key. After someone joins, people are added from inside the chat.
Loading…