Demo mode — every action is simulated in-browser against a self-contained mock. Set NEXT_PUBLIC_API_BASE to point the same client at the live SS-01 / SS-10 APIs.

Security

Active sessions and devices, and account protection. Sessions are managed by SS-01 (GET/DELETE /sessions · POST /sessions/end-others).

Active sessions

SS-01 /sessions

Two-factor authentication (MFA)

Coming soon

TOTP / passkey MFA is not yet exposed by the SS-01 identity contract, so we don't show a partial flow. When the endpoints land, you'll enrol an authenticator app or security key right here. Want early access?