Using the platform
The AgentFlow console — sign-in, workspace setup, and a map of every section operators use.
The AgentFlow console (https://af-dashboard.ivalt.com) is where
operators run a workspace: issuing agent keys, configuring
routing, inviting approvers, and reviewing the audit trail.
Getting access
There are two ways in, and both end in a passwordless email-code sign-in:
- Create a workspace. Sign up with your name, work email, and company name. A sign-in code is emailed to you; after signing in you activate the workspace and walk through a short setup wizard (company profile plus a getting-started checklist with links into the console). Every new workspace is provisioned with a built-in default approval path and an Approver role, so agents can submit requests before you configure anything.
- Accept an invite. An existing operator can invite you from Settings → Team. The invite email contains a link (valid for 7 days); accepting it signs you in the same way.
Operators hold one of two roles. Workspace admins manage exactly one workspace — everything they see is scoped to it. Platform admins (the AgentFlow team) have no home workspace and pick one from the workspace selector in the sidebar before acting; the selection is re-validated continuously.
Console map
| Section | What it's for |
|---|---|
| Dashboard | Workspace overview — pending queue, risk breakdown, recent activity. |
| Approvals | The live approval queue and full request detail — see Approvals. |
| Audit trail | The append-only event log — see Audit trail. |
| AI agents | Agent connections, keys, webhook delivery, and delivery history — see Agent connections. |
| People & roles | Approvers, invites, and roles — see People & roles. |
| Routing | Who gets assigned which requests — see Routing. |
| Settings | Workspace profile and the operator team. |
Which sections are visible depends on your workspace's configuration — a section that isn't enabled for your deployment simply doesn't appear in the sidebar.
What operators do
- Inspect approval requests — reassign them, re-notify the approver, read the timeline and the signed receipt. Operators cannot decide; deciding happens only in the TrustLoop app, by the assigned approver.
- Configure routing.
- Invite and manage approvers, roles, and other operators.
- Create AI agent connections — the keys agents call the API with — and monitor webhook deliveries.
- Browse the audit trail and verify its integrity.