Spaces:
Sleeping
Sleeping
| title: Cordon Cloud | |
| emoji: 📊 | |
| colorFrom: indigo | |
| colorTo: gray | |
| sdk: docker | |
| app_port: 7860 | |
| pinned: true | |
| license: apache-2.0 | |
| short_description: Cordon Cloud (closed beta) — design-partner access. | |
| # Cordon Cloud — closed beta | |
| > What did your AI agents *try* to do today, and what stopped them? | |
| This Space is the hosted backend + dashboard for | |
| [Cordon](https://github.com/Ashok-kumar290/cordon) — the action firewall | |
| for AI agents. | |
| **The dashboard at `/` is gated.** Visiting the bare URL returns an | |
| "Access required" page; design-partner investors and prospects are | |
| given a magic link of the form `/?t=<token>`. The token is rotated | |
| out of band. To request access, email **founders@cordon.ai**. | |
| The ingest endpoint (`POST /v1/ingest`) is reachable without the | |
| dashboard token — customer agents authenticate with their own | |
| per-tenant Bearer API key. Same Space, two different audiences, two | |
| different secrets. | |
| ## Endpoints | |
| | Method | Path | Auth | Audience | | |
| | ------ | ------------------- | ------------------------------------- | ---------------------- | | |
| | GET | `/` | `?t=<dashboard-token>` (or header) | Design partners | | |
| | GET | `/v1/events` | `?t=<dashboard-token>` (or header) | Design partners | | |
| | GET | `/v1/events/{id}` | `?t=<dashboard-token>` (or header) | Design partners | | |
| | GET | `/v1/metrics` | `?t=<dashboard-token>` (or header) | Design partners | | |
| | POST | `/v1/ingest` | `Authorization: Bearer <api-key>` | Customer agents (SDK) | | |
| | GET | `/healthz` | none | Uptime monitors | | |
| The header form is `X-Cordon-Dashboard-Token: <token>` — prefer it | |
| for scripted API access so the token isn't logged in URLs. | |
| The dashboard JS reads `?t=` once on page load and forwards it on | |
| every `/v1/*` call, so once you're in via the magic link, navigation | |
| just works. | |
| ## SDK wiring (after you've been provisioned a key) | |
| ```python | |
| # pip install cordon-ai | |
| from cordon import Guard | |
| from cordon.cloud import CloudReporter | |
| guard = Guard.strict() | |
| guard.add_listener(CloudReporter( | |
| api_key="cdn_<your-tenant>", # provisioned per tenant | |
| endpoint="https://seyomi-cordon-cloud.hf.space", | |
| )) | |
| ``` | |
| Every `guard.check()` ships a verdict to this dashboard from a | |
| background thread, without blocking your agent. | |
| ## What's in the dashboard right now | |
| On a cold start with an empty database, the server seeds 240 | |
| representative verdicts spread across the last 24 hours so the | |
| dashboard never shows an empty state during a sales call. Once real | |
| ingest traffic arrives under a project name configured in | |
| `CORDON_CLOUD_INGEST_KEYS`, that traffic appears alongside (or in | |
| place of) the seeded demo events. | |
| ## Caveats this beta deliberately ships with | |
| - **Ephemeral storage.** The sqlite file is reset on every container | |
| rebuild. Persistent retention (`CORDON_CLOUD_DB=postgresql://...`) | |
| is a paid-tier upgrade. | |
| - **One shared dashboard token.** Per-VC tokens + audit logs ship | |
| with the paid tier. | |
| - **No anomaly alerts yet.** Slack/PagerDuty webhooks are next. | |
| ## License | |
| Apache-2.0. Source: <https://github.com/Ashok-kumar290/cordon> | |