Skip to main content

First Admin Login

On a brand-new install there are no users yet. Orkestra ships a built-in dev-token endpoint (in shared/devtoken — no longer an optional addon since ADR-0006) that lets you generate an administrator JWT without going through registration.

ORKESTRA_API_URL=http://localhost:3000 ./scripts/devtoken.sh administrator

The script prints a Bearer token. Paste it into the admin UI's login form (or any API client) to access the platform with the administrator role.

:::warning Local development only The dev-token endpoint is available in development only — it is automatically disabled in production and staging, because it hands a signed super_admin token to any caller with no credentials at all. Never expose it on a public-facing instance. :::

What to do next​

  1. Configure SMTP at /admin/modules so verification and password-reset emails are delivered (the default noop driver logs them to stdout).
  2. Create your real administrator user via the standard registration flow.
  3. Confirm the dev-token endpoint is not reachable in production once you're done with the bootstrap (it is off automatically outside dev/staging).