# HQ (the portal)

[app.doubleagent.so](https://app.doubleagent.so) is where humans see the data. Log in with a magic link.

| Page | What |
|---|---|
| Sites | Every site in the account, with status: Unclaimed, Pending verification, Verified |
| Add site | Domain → snippet with your public key → verify (DNS, meta, file, script) → claimed sessions |
| HQ | Live now, agent share, who came in, known agents, profile and action, Dossiers |
| Dossiers | Every session, humans included, paged; filter by class or **Unverified traffic** (quarantined) |
| Keys | Create, rotate, revoke. Secret keys are shown once. |
| Settings | Profile, Debrief webhook, relabel credentials (write-only), discard pre-claim data |
| Audit log | Who changed what |

Until a domain is verified, HQ shows: *Data is being collected. Verify your domain to see it.*

Local: `npm run dev` prints the portal URL and a magic link for `demo@doubleagent.local`.