Cloud Portal — Web Dashboard
The GRAFOMEM Cloud Console is a web dashboard at cloud.grafomem.com for managing your deployment. Dark-mode UI. Its surface set evolves as new governance layers land — the table below is representative, not fixed.
Console surfaces
| Surface | Description | Key Features |
|---|---|---|
| Dashboard | System overview | Store count, memory count, recent activity |
| API Key | Programmatic access | View, copy, and rotate your API key |
| Compliance | GMP conformance | Conformance rate, capability declarations, signed reports, badge embed |
| Decision Trail | Inference audit | Stats grid, filter bar, paginated decision table, detail/replay panel, NDJSON export |
| Erasure Proof | GDPR certificates | Stats, issue certificates, certificate list, Ed25519 verification badges |
| Governance | Policy + review | Manage pre-execution policies; a read-only governance review view (separation of duties — decisions awaiting attestation) |
| Reputation (CGR) | Capability-Grounded Reputation | Per-agent scores with confidence (evidence mass); see CGR (early) |
| Ontology | World-model | The tenant's world-model types and actions |
| Reports | Regulatory | Generate reports supporting EU AI Act / GDPR / DORA compliance, section-by-section findings, download JSON |
| Billing | Plan management | Usage metrics, plan upgrades, Stripe integration |
Authentication
The portal uses email/password signup with JWT session tokens.
- Sign up:
https://cloud.grafomem.com/portal→ Create Account - Log in: Email + password → JWT stored in localStorage
- Session: JWT tokens with configurable expiry
Self-hosting the portal
The portal is a single-page application served from src/aml/static/portal/. It is automatically included when you run:
grafomem serve --cloud --db postgresql://...
The portal files:
| File | Purpose |
|---|---|
src/aml/static/portal/index.html | HTML structure — sections + sidebar nav |
src/aml/static/portal/portal.css | Design system — glassmorphism, responsive, dark mode |
src/aml/static/portal/portal.js | SPA logic — API calls, rendering, state management |
API key management
From the API Key tab:
- Reveal — shows your full API key (masked by default)
- Copy — copies to clipboard
- Rotate — generates a new key (invalidates the old one)
Use the key in all API requests:
curl -H "Authorization: Bearer gf_your_api_key" \
https://cloud.grafomem.com/v1/decisions/stats
Compliance badge
From the Compliance tab, embed a GMP compliance badge in your README or website:
Markdown:
[](https://cloud.grafomem.com)
HTML:
<a href="https://cloud.grafomem.com">
<img src="https://cloud.grafomem.com/v1/cloud/badge/your-tenant-id" alt="GMP Verified" />
</a>