AAgentProof

Magic-link email delivery — warning

smtp configured no login observed yet

SMTP configured · no login round-trip observed yet

Operator has flagged SMTP as configured. No signed-in session has been observed on this request. Login is not blocked — but cannot be proven on this surface until someone signs in.

Exact action: Send a test magic-link to your own email and complete the round-trip. /admin/setup will reflect the result and /workspace will read the same session.

Where: Supabase → Authentication → SMTP Settings

Fallback paths while SMTP is being configured

Open demo / sample — Sample data — never claims real. Lets a tester walk the journey while SMTP is being configured.
Local test access (dev only) — Only available on non-production deployments with AGENTPROOF_ENABLE_LOCAL_TEST_AUTH=true. Uses the safe test workspace.
Account

Sign in to AgentProof

Magic-link only. There is no password. Enter your email and we will send you a sign-in link.

We send a magic link. No password needed. Click the link in the email to sign in.

New here? Create a workspaceUse sample demoStart trialBack to home

Magic-link only. No passwords, no SSO, no third-party trackers.

When configured, the Supabase project must be in an EU region. No live AI provider is contacted at any point.

Safe non-production test access — proof

production blocked

Production deployment — staging test access permanently blocked.

Exact next action: No action available on production. Use real magic-link sign-in (Supabase SMTP must be configured).

Disabled by default: yes

The gate requires AGENTPROOF_ENABLE_LOCAL_TEST_AUTH=true. Unset = blocked. This is a hard invariant.

Permanently blocked in production: BLOCKED (NODE_ENV=production)

NODE_ENV=production on this deployment. Local test access is permanently disabled here.

AGENTPROOF_ENABLE_LOCAL_TEST_AUTH flag: (unset)

Operator has NOT enabled the flag. This is the safe default.

NEXT_PUBLIC_APP_URL not a production host: (production host)

Deploy URL looks like a production hostname. Test access is blocked even if the flag is set.

AGENTPROOF_LOCAL_TEST_USER_EMAIL set: (unset)

No test user email — test access cannot sign anyone in even if the flag is on.

AGENTPROOF_LOCAL_TEST_USER_PASSWORD set: (unset)

No test user password — test access cannot sign anyone in even if the flag is on.

Final decision: flag_not_set

AGENTPROOF_ENABLE_LOCAL_TEST_AUTH is not 'true'. Local test access is disabled by default.

Counts as production auth ready: no — never

Staging test access NEVER satisfies the public-beta gate. Production auth ready requires real magic-link sign-in working with a real customer email + SMTP configured.

Staging test access entry point

Staging test access (non-production) — AGENTPROOF_ENABLE_LOCAL_TEST_AUTH is not 'true'. Local test access is disabled by default.

Public-beta separation: Staging test access NEVER satisfies the public-beta gate. Production auth ready requires real magic-link sign-in working end-to-end with a real customer email + Supabase SMTP configured.