Security
MFA readiness, session audit, IP allowlist, secrets, CSRF/rate-limit readiness, and production locks.
MFA
totp-ready
warnSession audits
0
Managed access
Create support, sales, admin, developer, or tenant accounts directly. Super Admin sets the password, so the user does not need to self-register.
| Role | Status | Password | Source | Granted | Controls | |
|---|---|---|---|---|---|---|
Configured in MOPITU_ALLOWED_SUPER_ADMIN_EMAILS. | super-admin | active | Env secret | environment | cloudflare-worker-env 6/30/2026, 7:00:00 PM | Worker env locked |
Tenant registration and login activity
Track every registration intent, provider click, login attempt, failed login, and successful sign-in with location and device context. Passwords are never collected.
Total
0
Successful
0
Failed
0
Countries
0
| Time | Event | Status | User | Source | Location | IP | Device |
|---|---|---|---|---|---|---|---|
| No login or registration events yet. | |||||||
Readiness checks
| Check | Status | Detail |
|---|---|---|
| Persistence mode | warn | Embedded runtime store, connect production database before launch |
| Database URL | warn | Running embedded runtime store |
| Stripe secret | warn | Stripe secret missing |
| Stripe webhook secret | warn | Webhook secret missing |
| Key encryption secret | warn | Using fallback development secret |
| Session secret | warn | Using fallback development secret |
| IP allowlist | warn | No allowlist configured |
Session audit
| Admin | Event | IP | Date |
|---|---|---|---|
| No records available. | |||