Jug Scope — Admin Console

Authenticate

Paste a valid SIWA session JWT for an allowlisted admin account and the admin API bearer. Both are held in memory only and sent as Authorization: Bearer and X-Admin-Token on every request.

SIWA-in-browser (Apple JS + /auth/siwa exchange) is a follow-up. For now the operator supplies an already-minted session JWT. No credential is ever persisted by this app — if your browser or password manager offers to save these fields, decline it.

User search

User detail

Actions

Grant export credits non-destructive

Comp subscription non-destructive

Revoke entitlement non-destructive

Unlock inspection non-destructive

Claw back credits destructive · TOTP

Delete R2 storage destructive · TOTP

Anonymize user (PII scrub) destructive · TOTP

Hard-delete user irreversible · TOTP

User search

User detail

Actions

Audit log

TestFlight testers