The InferCrane console is a separate web application over the same authenticated control API used
by the CLI, SDKs, Terraform provider, and terminal workspace. It is not a second backend and never
reads PostgreSQL or provider credentials directly.
The hosted console is currently deny-by-default private preview. The initial public product is
CLI- and API-first. Local self-hosted use does not require an InferCrane Cloud or Clerk account.
What the console covers
- fleet attention, stable endpoints, and concrete workloads;
- durable operations with reconnectable timelines and cooperative cancellation;
- Request Inspector and deterministic Doctor findings;
- endpoint monitoring for request rate, errors, fallback, TTFT, queueing, latency, and reported token throughput;
- Release Guard, benchmark, replay, revision, and replica evidence where available;
- lifecycle overlays, signed alert policies, sourced FinOps reports, and signed output-quality evidence;
- provider/runtime capability inventory and secret references;
- scoped API-key lifecycle and private-preview team access.
Missing or forbidden evidence remains explicit. A failed optional panel does not make a deployment
look healthy, and an unavailable measurement is never rendered as zero.
The monitoring page queries only the authenticated control API. PostgreSQL request evidence and
lifecycle events form the initial local evidence store; OpenTelemetry GenAI semantics define the
portable names and dimensions. Runtime-internal and GPU metrics remain unavailable until a
qualified runtime or provider adapter reports them.
Local self-hosted console
From an infercrane-web checkout, configure the local adapter:
Open http://127.0.0.1:3200 and exchange an existing InferCrane API credential. The BFF validates
the credential with the control plane and seals it into an eight-hour, encrypted, HttpOnly,
SameSite=Strict session. Browser JavaScript does not receive the raw token after exchange.
Use a unique session secret and HTTPS in production. Do not place the bootstrap credential in a
shared browser session; create a scoped service account instead.
Hosted private preview
Hosted mode uses Clerk for sign-in, sessions, and organization selection. Clerk authentication alone
does not grant access. The Go control plane independently requires a mapped InferCrane user,
organization membership, role/scopes, and active web_console_access entitlement. Default access is
denied.
Configure the Go verifier with the Clerk instance’s HTTPS issuer and public JWT verification key:
The private-preview Clerk instance must disable public sign-up and restrict organization creation.
Those identity-provider controls improve the sign-in UX; the InferCrane entitlement remains the
authoritative access boundary.
Every protected page and server action resolves a server-side session. Every control API request
then repeats authentication, authorization, and tenant ownership checks. Organization IDs supplied
only by browser input never establish authority.
Durable work
Closing the browser does not cancel deployment work. Reopen the console or resume from any terminal:
Cancellation is cooperative. Provider cleanup may continue after cancellation is requested or the
browser closes.
Terminal equivalent
For headless, low-bandwidth, or incident use, the terminal surfaces remain first-class:
The public Dashboard link intentionally leads to a Coming Soon page until hosted access is ready for
general users.