Settings/Access Management

Access Management

Manage who can access Mission Control via Cloudflare Access

Cloudflare API Integration Pending

This page will connect to the Cloudflare Access API to dynamically manage allowed email addresses. Currently showing a static placeholder.

To fully implement: set CF_API_TOKEN, CF_ACCOUNT_ID, and CF_ACCESS_APP_ID in your environment, then wire up the Cloudflare Access API calls.

Allowed Emails

Users with these email addresses can access mc.ibetter.ai

zhuhuilin@gmail.com

owner

Add Email Address

Grant dashboard access to a new email

⚠ Requires Cloudflare API integration — configure CF_API_TOKEN to enable

Cloudflare Access Policy

Zero Trust application configuration

Applicationmc.ibetter.ai

Session Duration24h

Auth ProvidersGoogle, GitHub, One-time PIN

PolicyAllow — email is in list

API Integration Reference

Cloudflare Access API endpoints

# List policies

GET /client/v4/accounts/{CF_ACCOUNT_ID}/access/apps/{CF_ACCESS_APP_ID}/policies

# Update policy (add/remove email)

PUT /client/v4/accounts/{CF_ACCOUNT_ID}/access/apps/{CF_ACCESS_APP_ID}/policies/{policy_id}

# Auth header

Authorization: Bearer {CF_API_TOKEN}