Welcome back ✦
Manage your links, domains, and integrations from one place.
Quick actions
Jump back into your workflow.
Recent activity
Actions performed in this browser session.
This starter UI stores demo data in your browser. Add the Worker URL and deploy the backend before using real provider APIs.
Link Generator
Create a short link using your configured provider.
Generate a new link
Enter a destination URL and choose a provider.
Generated links
Links created during this session.
| Destination | Short link | Provider | Created |
|---|---|---|---|
| No links generated yet. | |||
Domain Manager
Maintain a simple inventory of domains you manage.
Adding a domain here does not register a domain or change DNS. Connect the backend and implement the desired Cloudflare operation first.
Your domains
0 domains in inventory
| Domain | Note | Status | Action |
|---|---|---|---|
| No domains added yet. | |||
Image Host
Upload an image into a configured repository folder.
Image upload is disabled until GitHub credentials are configured server-side. Never paste a GitHub token into frontend code.
Upload image
Choose an image and review the target path.
Integrations
Configure services without exposing credentials in the browser.
Cloudflare
Domain inventory and DNS operations through the Cloudflare API.
TinyURL
Create short links through your provider account.
GitHub Image Host
Upload files into a repository using the Contents API.
Connection test
Tests call the configured backend only when a Worker URL is saved.
Settings
Set your backend endpoint and non-secret workspace preferences.
General settings
Workspace appearance and backend connection.
Provider setup checklist
Credentials must be stored as Worker secrets, not in this page.
Security checklist
Complete these before using the dashboard with real credentials.
✓ Keep API secrets in Cloudflare Worker Secrets.
✓ Require authentication on all private Worker endpoints.
✓ Apply rate limits and per-user quotas.
✓ Restrict CORS to your actual dashboard origin.
✓ Rotate any token that was shared or exposed.
✓ Never treat a client-side password or hidden input as authentication.