ConfigurationDashboard

Dashboard

Kyber includes a secure local web dashboard for viewing and editing configuration.

Starting the dashboard

kyber dashboard

Runs at http://127.0.0.1:18890 by default. On first run, a bearer token is generated automatically and saved to your config.

💎 Kyber dashboard running at http://127.0.0.1:18890
  Token: abc123…wxyz  (run with --show-token to reveal)

Revealing the token

kyber dashboard --show-token

You can also find it in ~/.kyber/config.json under dashboard.authToken.

Configuration

{
  "dashboard": {
    "host": "127.0.0.1",
    "port": 18890,
    "authToken": "",
    "allowedHosts": []
  }
}
FieldTypeDefaultDescription
hoststring127.0.0.1Bind address
portnumber18890Port
authTokenstringauto-generatedBearer token for authentication
allowedHostsarray[]Extra allowed Host headers (required for non-local binding)

CLI flags

FlagDescription
--hostOverride bind address
--portOverride port
--show-tokenPrint the full auth token on startup

Security

The dashboard refuses to bind to a non-local address unless allowedHosts is configured. This prevents accidental exposure on public interfaces.

If you need remote access (e.g., on a VPS), set the host and add your domain:

{
  "dashboard": {
    "host": "0.0.0.0",
    "allowedHosts": ["kyber.example.com"]
  }
}

Use a reverse proxy (nginx, Caddy) with HTTPS in front of it.

Dashboard sections

The web UI has a sidebar with sections for:

  • Providers — API keys and model selection
  • Agent — workspace, temperature, token limits
  • Channels — Discord, Telegram, WhatsApp, Feishu
  • Tools — web search, shell execution settings
  • Gateway — host and port
  • Dashboard — auth token and binding
  • Raw JSON — direct config editor

Changes are saved to ~/.kyber/config.json. Restart running services after saving to apply.

Agent SettingsGateway