Control Panel
The Control Panel (/control-panel) is the administrative hub. It's gated by the read · Organization ability, so Administrators (full) and Auditors (read-only) can open it; Members cannot (the sidebar item is hidden for them). The set of tabs depends on the viewer's organization type.
Tabs
| Tab | Search param | Central (Issuer) | Commercial (Participant) |
|---|---|---|---|
| Internal Users | ?tab=internal-users | ✓ | ✓ |
| Tokens | ?tab=tokens | ✓ | ✓ |
| Organizations | ?tab=organizations | ✓ | — |
| Organization Profile | ?tab=organization-profile | ✓ | ✓ |
| Chain RPC | ?tab=chain-rpc | ✓ | ✓ |
The active tab is persisted in the ?tab= search param.
Internal Users
Manage the organization's people: invite a user (with role), change role, deactivate, and resend/revoke invitations. Mutations require manage · User / manage · Invitation; the listing (GET /control-panel/internal-users) requires manage · User. See Authentication, Users & Roles.
The Internal Users tab with its tab strip (Internal Users · Tokens · Organizations · Organization profile · Chain RPC); per-row Edit role / Deactivate actions are gated on manage · User.
Tokens
The token registry. Listing and reading tokens is open to any authenticated user (GET /tokens, GET /tokens/:id); creating, updating, deleting, and autodetecting tokens require manage · Token (administrators).
The token registry — the native HNL token with its decimals and "Native" status; "Add token" is gated on manage · Token.
Organizations (Central only)
Lists commercial organizations and links to each org's detail page. Covered in Organizations & Bridging.
Organization Profile
The viewer's own organization — name, status, type, and (for the central org's admins) exchange-address and profile settings.
Chain RPC
View and update the blockchain RPC endpoint the API uses. Updating is an EXCHANGE-style admin action recorded in the activity log; with PER_ORG_RPC_ENABLED each org can point at its own node (see Organizations & Bridging).
Operational alerts
GET /control-panel/alerts (requires manage · Organization) surfaces operational warnings — e.g. unreachable chain RPC or unlinked/frozen exchange addresses — that the panel renders as banners.