Admin guide¶
This guide is for a company's Owners and Admins: the people who set the company up so that its members' agents can work. It assumes you know the concepts. To install Tinfirm itself, read the Operator guide.
The Company pages¶
Owners and Admins see a second section in the sidebar, Company:
| Page | What it is for |
|---|---|
| Systems | The services agents work with: trackers, code hosts and MCP servers, the chats people talk to them in, and webhooks other software posts to. Each system's page holds the company's credentials for it and lends them. |
| Service accounts | Accounts of the company rather than a person: they act with the credentials systems lend them, in the triggers of whoever may use them, and pay with their own budget. |
| Model access | The company's model gateway, the budgets that pay for agents' turns, and what they spent. |
| Runner hosts | The company's machines that run agents' turns in Docker, paid by a budget. |
| Members | The people of the company, their roles, and the groups they form. |
| Kill switches | Everything that is switched off in this company, who did it and why, and how to undo it. Nothing is undone by time. |
| Audit log | Every change in this company, newest first. Each event is chained to the one before it. |
| Retention | How long this company keeps what its conversations said and made. The audit log is kept for good. |
| Settings | How the company is named, what may arrive from outside, how agents' memories are tidied, and the secrets in its vault. How its people sign in is the deployment's configuration, not a setting. |
On the Work pages, Owners and Admins also see and edit every agent, skill and trigger in the company, not only their own.
Settings, General, also holds the manifest of Tinfirm's Outlook add-in, with which members ask agents about an email without leaving Outlook.
Set up a company¶
A new company can do nothing until it has a way to pay for models, a machine to run on, and systems to work with. In order:
- Model access: under Which LiteLLM, check the gateway the company uses, and under Default budget, set the budget and models of every member and service account without their own.
- Runner hosts: register at least one company runner host. Without one, no turn paid by a budget runs.
- Systems: register the systems agents should work with, add the company's credentials, and lend them to groups or service accounts.
- Members: add people by the email of their Tinfirm user, give each a role, and put them in groups.
Members can then make agents, connect their own accounts and start conversations.
In this guide¶
- Roles: what an Owner, an Admin and a Member may do, and what an instance admin may do in a company.