Ucode Admin

Deployment

Clients trust this portal only if they pin its signing key. Push both values below to every machine via MDM.

Policy version
Published
Bundle TTL
Entra SSO
Master key id
`UCODE_POLICY_URL`
`UCODE_POLICY_PUBLIC_KEY`

Microsoft Entra ID

Who may use Ucode. Group allowlisting matches on object IDs — display names silently match nothing.

Tenant ID Client ID

Allowed group object IDs (comma separated) Sign-in required (deployments must opt out, not in)

Network egress

Where code may go. Default-deny: a host is unreachable until listed here or covered by a profile.

Allowlist (comma separated; .example.com and *.example.com supported)

Profiles

Mode Internal gateway URL

Marketplace

Internally hosted skill catalog and plugin mirror. Empty disables the marketplace.

Catalog URL Official plugins repository

Publish

Publishing signs a new version. Clients reject any bundle older than the newest they have accepted, so correcting a mistake means publishing forward, never rolling back.

Change note (optional)

Provider keys

Encrypted at rest and served only to the gateway, never to a browser and never inside a policy bundle — that would put bank credentials on every laptop.

Scope Value

Scope	Value	Updated	By	Key

Recent activity

Every publish, sign-in and secret change. Values are never recorded.

When	Actor	Action	Detail

Sign in

Deployment

Microsoft Entra ID

Network egress

Marketplace

Publish

Provider keys

Recent activity