Owner sign-in

Magic-link cookie auth. Link is printed to the ArtiFTP server console in dev.

Not signed in.

After you click the link in the console, this UI reloads with an artiftp_owner cookie.

Sites

Connected hosts. Agents never see SFTP credentials.

0

Sites

0

Active

0

Pending

Live: Connect a host, set Policy, then Approve a pending agent request.

Vault SFTP once. The gateway holds creds — agents only get short-lived session tokens.

Display name

SFTP host

Username

Port

Password or private key

Paste password or PEM key material. Never shown to agents or in chat.

Stored encrypted — agents never see this. Only the ArtiFTP gateway decrypts in-memory for approved sessions.

Jail the agent to a folder. Credentials stay vaulted.

Allowed root

Add a directory

MVP: one root per site. GoDaddy jail root is often /home/…/public_html (not bare /). Type a path and Add — it becomes the jailed root_path.

Access mode

Session TTL

Pending agent requests · Approve posts to /approve/:token.

Email link SMS fallback Pending

ArtiFTP

Secure folder access request

Agent

ArtiFTP — approve this upload

—

Purpose —

Site —

Path —

Mode —

TTL —

No live session. Approve a request to start one.

No active session.

Recent ArtiFTP events across your sites.

When	Event	Site