Secure agent operations

One command center.
Every agent accountable.

Plan, authorize, execute, and validate work across isolated tenant workspaces—with live evidence and bounded automation.

Tenant isolatedPolicy gatedFully audited

CONTROL PLANE ACCESS

Welcome back

Use your verified ENIMA account to continue.

Sessions use short-lived access and rotated refresh tokens. Privileged accounts require MFA.

MISSION CONTROL

Good day, Operator.

Here’s the state of your autonomous operations.

EXECUTION STREAM

Recent tasks

NEEDS ATTENTION

Approval queue

WORKSPACES

Projects

Tenant-scoped homes for objectives, memory, artifacts, and policy.

AGENCY PRODUCTION WORKSPACE

Website Studio

Turn approved business truth into a website, SEO plan, verified preview, and controlled release.

1BriefBusiness truth
2SitemapPages and intent
3DesignBrand system
4ContentEvidence-backed copy
5BuildBounded factory
6QADeterministic gates
7ApproveExact artifact
8DeployControlled target

STEP 1 · SOURCE OF TRUTH

Agency project brief

Save drafts freely. Owner MFA is required to approve the exact immutable version used for production.

Not saved

Business and offer

Business name (required)Locales (comma separated)

What is true about this business? (required)

Audiences (one per line)Offers (one per line)

Conversion and boundaries

Primary conversion (required)Primary CTA (required)

Proof required (one per line)Forbidden claims (one per line)

Consent and compliance requirements (one per line)

Deployment and internal notes

Dedicated HTTPS deployment origin (optional)Internal notes (never include passwords or keys)

Saving creates a new immutable version and resets approval. No website is published from this form.

PROOF & CLAIM LEDGER

Facts allowed in production

Every price, statistic, review, certification, testimonial, or promise needs a truth label and evidence.

0 claims

TENANT-SCOPED SOURCE

Workspace files

Browse and edit bounded UTF-8 source through Workspace Manager containment and optimistic version checks.

SOURCE EDITOR

Select a source file

Files are read and written only through a tenant-scoped Workspace Manager service.

DURABLE ORCHESTRATION

Tasks

Every transition is persisted, bounded, and auditable.

HUMAN AUTHORITY

Approvals

Inspect exact capability, risk, environment, and argument fingerprint.

FACTORIES & RELEASES

Delivery

Signed artifacts, sequential QA, policy-gated promotions, and tested rollback evidence.

CONTROLLED DESTINATIONS

Deployment targets

IMMUTABLE OUTPUTS

Artifacts

PROMOTION HISTORY

Deployments

FACTORY PIPELINE

Factory runs

AI WEBSITE BUILDER

Tell Hermes what you want to build

Describe the result in normal language. Hermes prepares the plan, assigns the right agents and keeps working through bounded recovery until the goal is verified or needs your help.

Project and agent settings

START HERE

What website do you want?

You only describe the outcome. Hermes handles the prompt, task breakdown, agent selection, SEO, QA and preview. You approve the exact plan once before work begins.

1PlanHermes prepares the work
2ApproveYou review scope and budget
3BuildHermes assigns only the agents needed
4VerifyQA checks acceptance
5DoneResults and evidence ready

ACTIVE GOALS

Plans and execution

Every goal shows the next action, live progress, assigned agents and recovery state.

Advanced conversation history

Hermes project conversation

SANITIZED TRANSCRIPT

Select a thread

Idle

SECURE MOBILE CONTROL

Telegram setup

Bind an authorized Telegram account to one active project without exposing bot credentials.

ONE-TIME CONNECTION

Connect this account

Project

The binding can create and inspect tasks only inside the selected active project.

SAFE HANDOFF

Finish in Telegram

1Select the exact active project you want this Telegram account to control.
2Create a short-lived code, then open your configured ENIMA bot.
3Send /bind CODE. ENIMA verifies your membership again before every command.

Credentials stay private

This page never receives or displays the bot token, webhook secret, service key, or Telegram chat ID.

AUTHORIZED CONNECTIONS

Active bindings

Revoke access immediately when an account or project should no longer use Telegram.

0 active

BOUNDED WORKFORCE

Agent catalog

Choose a reviewed agent, describe the outcome, and follow the run from one place.

VERSIONED AGENT KNOW-HOW

Skill registry

Create tenant-owned skills, test and approve immutable versions, then assign active versions without expanding agent capabilities.

MODEL CONTROL PLANE

OmniRouter Control Center

Manage authorized provider accounts, model routes, hard budgets, concurrency, and health without exposing credentials.

Open subscription router ↗

ROUTING ENGINE

Gateway policy

Live

POOL HEALTH

Operational state

AUTHORIZED ACCOUNT POOL

Provider accounts

Credentials stay write-only. Manage only redacted routing metadata.

MODEL REGISTRY

Available routes

Provider models currently attached to this tenant's account pool.

ROUTING EVIDENCE

Recent decisions

Redacted selection outcomes, latency, cost, and failure codes.

SCOPED INTELLIGENCE

Project Brain

Versioned knowledge, rules, prompts, sources, and verified lessons with citations.

ACCOUNT SECURITY

Security & sessions

Review active browser sessions and revoke access you no longer recognize. Session identifiers and token material are never displayed.

ROTATE CREDENTIAL

Change password

Use 12–128 characters with uppercase, lowercase, number, and symbol. Success signs out every browser session.

ACTIVE ACCESS

Browser sessions

Revoking the current session signs this browser out immediately. Other sessions stop refreshing and their access tokens fail closed.

TENANT ACCESS CONTROL

Members & roles

Manage verified ENIMA accounts inside this organization. Privilege changes revoke the affected user's active sessions.

ADD EXISTING ACCOUNT

Assign organization access

The account must already be active and email-verified. New-account invitations use a separate activation flow.

CURRENT AUTHORITY

Organization members

Owner protections and MFA checks are enforced by the server.

CONNECTED SERVICES

Integrations & MCP

Connect official services, then bind their reviewed tools to one project with explicit scopes.

SEO DATA · OFFICIAL MCP

Semrush

Ready

Keyword research, competitors, backlinks, projects and site-audit data through Semrush's official read-oriented MCP.

MCP endpoint: https://mcp.semrush.com/v2/mcp
Authentication: OAuth 2.1 or API key

Get API key

HOSTING · OFFICIAL MCP

Hostinger

Approval gated

Domains, DNS, websites and VPS operations through Hostinger's official MCP server. Mutating and deployment tools always require policy approval.

MCP package: hostinger-api-mcp
Authentication: Hostinger API token

Create API token

WRITE-ONLY CONNECTIONS

Connected accounts

Credentials are tested once, encrypted and never returned to this browser.

VERIFIED PROVIDER EVIDENCE

Research & DNS actions

Read actions run immediately. Every DNS change waits for a separate MFA-protected approval of the exact argument digest.

SIGNED CATALOG

Reviewed plugins

TENANT CONSENT

Project installations

HEALTHY TOOL SERVERS

Reviewed MCP catalog

PROJECT TOOL AUTHORITY

MCP bindings

POLICY SURFACE

Capability registry

Versioned tools with fixed handlers, scopes, risk, and approval modes.

COST ENGINE

Usage & cost

Normalized model and task budget accounting for the last 30 days.

MODEL BREAKDOWN

Provider usage

IMMUTABLE EVIDENCE

Audit trail

Who acted, what changed, and which policy decision applied.