Admin Back-office
⚡ 3 min readComing Soon — Admin Back-office (SDK sign-in for downstream apps) is not generally available yet. Use AI Agent (MCP) and Common docs for current workflows; this section will open when the feature ships.
app.transcodes.io is the Transcodes Console — a Next.js visual project editor where you configure authentication for downstream apps (your SaaS admin, customer portal, MCP agents). Operators sign in with Firebase; end-user auth runs on Transcodes Auth via the SDK you configure here.
Console layout
- Organization → pick or create a project.
- ReactFlow canvas — Project Setup node plus Authentication Kit Cluster nodes.
- Click a kit node to open its panel (side drawer or center modal).
Configuration, Webhook, and MCP open as center modals. Most other kit nodes open a right-side panel.
Authentication Kit Cluster
| Node | Panel type | What you configure |
|---|---|---|
| Installation Guide | Side | Copy webworker.js CDN snippet and Project ID |
| Configuration | Modal | Domain URL (read-only here), token TTL, SDK Redirect Origins, .well-known/webauthn helper |
| Branding | Side | Logo, colors, title, slogan for Transcodes Auth |
| RBAC | Modal | Members (must exist before SDK sign-in), roles, resource permissions |
| Audit Logs | Side | MFA / security event charts and log review |
| JSON Web Key | Side | Generate ES256 public JWK for your backend |
| Webhook | Modal | Slack / Discord alerts |
| MCP | Modal | AI agent connection (MAT, transcodes-guard) |
| Backup | Side | Encrypted member backup download |
Project Setup node (separate from the cluster): download TypeScript definitions (transcodes.d.ts) and set Domain URL when creating or editing the project.
First-time setup workflow
- Create a project — default Domain URL can be the Transcodes hosted auth domain (Transcodes Auth) or your own origin.
- Open Authentication Kit Cluster → run the setup wizard (domain/branding/JWK/members) or configure nodes one by one.
- RBAC → Members — register every user who will sign in through your app.
- Installation Guide — copy the CDN script into your app (not the Console itself).
- If your app hosts the SDK and receives sign-in redirects, add SDK Redirect Origins under Configuration → Domains. Leave empty for MCP-only or fully hosted auth.
- JSON Web Key — copy the public key to your API server (verify member JWTs with ES256).
What the Console is not
Console (app.transcodes.io) | Your app + SDK |
|---|---|
| Firebase login for builders | redirectToSignIn / handleSignInCallback for members |
| Issues member API tokens (MAT) for MCP | Stores member JWT in IndexedDB after sign-in |
| Generates install snippets | Loads webworker.js and calls SDK APIs |
Implement member auth in your stack: Signin · Next.js · React