# turnstone console

SAVED SESSIONS
0 selected
WORKSTREAMS
STATE NAME MODEL NODE TASK TOKENS CTX
USERS
USERNAME DISPLAY NAME CREATED ACTIONS
Loading users...
PROJECTS
NAME VISIBILITY STATE ACTIONS
Loading projects...
PERSONAS
NAME KINDS ENVELOPE STATE ACTIONS
Loading personas...
API TOKENS Filter tokens by user
PREFIX NAME SCOPES CREATED EXPIRES ACTIONS
Select a user to view tokens
CHANNEL LINKS Filter channels by user
CHANNEL EXTERNAL ID LINKED ACTIONS
Select a user to view channel links
SCHEDULED TASKS
NAME TYPE SCHEDULE TARGET NEXT RUN STATUS ACTIONS
Loading schedules...
WATCHES Filter watches by node
NAME NODE COMMAND INTERVAL POLL CONDITION STATUS ACTIONS
Loading watches...
ROLES
NAME PERMISSIONS ACTIONS
Loading roles...
TOOL POLICIES
NAME PATTERN ACTION PRI STATUS ACTIONS
Loading policies...
PROMPTS
NAME TOOL GATE PRI STATUS ACTIONS
Loading prompt policies...
JUDGE
Loading settings...
Pattern rules for pre-execution intent validation
NAME TIER RISK TOOL REC. SOURCE STATUS ACTIONS
Loading rules...
Regex patterns for post-execution output scanning
NAME CATEGORY RISK FLAG SOURCE STATUS ACTIONS
Loading patterns...
SKILLS
CATEGORY NAME RISK ACTIONS
No skills configured
ⓘ Skills are community-published and not vetted by Turnstone.
Review source content before installing.
Search external registries to discover and install skills
USAGE
Loading usage data...
AUDIT LOG Filter by action
Filter by user
TIME USER ACTION RESOURCE DETAIL
Loading audit log...
MEMORIES
NAME TYPE SCOPE DESCRIPTION UPDATED ACTIONS
Loading…
MODELS
Model definitions used by sessions across the cluster
ALIAS MODEL PROVIDER CTX WINDOW STATUS ACTIONS
Loading...
Per-role model assignments. Empty = use the default model.
Loading…
NODE METADATA
Loading…
SETTINGS docs
Loading…
TLS / CERTIFICATES
DOMAIN SANS ISSUED EXPIRES ACTIONS
Loading…
MCP
NAME TRANSPORT TOOLS RES PROMPTS STATUS ACTIONS
Loading...
ⓘ Servers are community-published via the official MCP Registry and not vetted by Turnstone.
Review source repositories before installing.
Search the official MCP Registry to discover and install servers
Name Description optional
When
Runs
At time — UTC
On days
At time — UTC
On day
At time — UTC
Every
Unit
Run at — your local time
Cron expression min hour day month weekday
Next runs
Target
Target
Node ID
Execution
Model optional
Skill optional
Persona optional
Project optional
Initial message
Auto-approve tool calls Enabled
Notify on completion optional
Alias
Model ID type to autocomplete
Provider
Base URL empty = provider default
API Key write-only, never displayed
Context window 0 = auto-detect
Active
Sampling defaults
Temperature empty = global
Max tokens empty = global
Reasoning effort empty = global
Response controls
Output verbosity answer length, independent of effort
Reasoning mode Pro applies more work before answering
Server compatibility
Server type auto-detected or manual
API surface chat vs responses
Thinking mode chat-template reasoning
Template param name Granite/DeepSeek use "thinking"
Effort param chat-template key for graded effort — empty = template has none
Extra body params JSON, merged into every request
Capabilities
Loaded from the built-in table for · override anything below
Tools Vision PDF documents Server-side web search Temperature Reasoning-effort control Output verbosity Standard / Pro mode Transcription (STT) Speech (TTS) Audio input Reranker
Advanced capabilities JSON
Surface persisted reasoning Replay reasoning to model
Name Tool pattern glob: bash*, file_write, *
Action
Priority higher = evaluated first
Enabled
Username Display name Password Confirm password
Token name optional Scopes
Expiry optional
Channel type
External user ID the user's ID on the platform
Server name Transport
Command Arguments one per line Environment variables KEY=VALUE, one per line
URL Headers KEY: VALUE, one per line
Multitenant authorization
No authorization Static headers single shared identity Per-user OAuth 2.1 recommended Sign-in passthrough uses your org login — no separate connect

Each user's org sign-in mints an access token for this server on demand — no per-user connect step. Requires the audience below and matching delegated permissions in your identity provider.

Authorization server URL optional — override discovery when the MCP server URL is not the OAuth issuer Client registration
Client ID Client secret write-only, never displayed
Scopes space-separated Audience auto-populated from URL
Auto-approve tools Enabled
Paste JSON

Paste a JSON object with a `mcpServers` key (Claude Desktop / VS Code / Cursor format). Existing servers with the same name will be skipped.

Name
Display name
Permissions
Name Visibility
Name how agents and the CLI launch it — persona=<name> on task_agent / spawn_workstream / spawn_batch, --persona <name> on the CLI. Case doesn't matter; the display name below is only a label in lists Display name Description Applies to
Base prompt Tool visibility
Extra tool names comma-separated, e.g. MCP tools; include tool_search to keep the set expandable
MCP enabled (workstream-wide, including task agents) Memory enabled (recall injection, nudges, memory tool)
Add member
GitHub URL a repository or SKILL.md link
Name slug-style identifier Tool gate tool name or blank for unconditional Content markdown body for system message Priority higher = assembled later (closer to conversation) Enabled
Name
Tier
Risk level
Recommendation
Tool pattern
fnmatch syntax: bash, write_file, mcp__*
Arg patterns
One regex per line. Each pattern is matched against the serialized tool arguments.
Confidence 0.0–1.0
Rule confidence between 0.0 and 1.0. Higher values mean the rule is more certain when it matches.
Intent description supports {arg_snippet} Reasoning
Name
Category
Risk level
Regex pattern
Flag name Annotation Pattern flags
Comma-separated regex compilation flags: IGNORECASE, MULTILINE, DOTALL.
Is credential
Redact label

### Identity

Name Category
Description

### Manifest

Tags Author Version License
Compatibility
Environment requirements like other tools, services, or runtimes the skill expects. Max 500 chars.
Paths
Glob patterns gating model-initiated autoload, e.g. `**/*.py`. Comma-separated. Maps to SKILL.md `paths:`. Filter consumer pending.
Hide from skill picker
Arguments
Named positional slots substituted as `$<name>` in the skill body. Comma-separated. Maps to SKILL.md `arguments:`.
Argument hint
Display string shown next to slash-command autocomplete, e.g. `[issue-number]`. Maps to SKILL.md `argument-hint:`.

### Deployment

Activation
How models discover this skill. Named requires explicit `/skill` invocation; Default is applied to every session; Search is BM25-discoverable.
Apply to new workstreams by default

### Skill Content available: {{model}}, {{ws_id}}, {{node_id}}

Tip: paste a SKILL.md (with `---` frontmatter) to auto-fill the form. Parsing SKILL.md…
Runtime Config model, temperature, token limits
Model
Temperature
Reasoning Effort
Max Tokens
Token Budget
Agent Max Turns
Auto-approve all tools Allowed Tools comma-separated tool names for auto-approve Notify on completion optional JSON array. Each: channel_type + channel_id or user_id Enabled
Security Scan
Resources bundled files (scripts, references, assets)
Path Content Type Content
Resources bundled files for this skill
Path Content Type Content

Shown once — store it now. Turnstone keeps only the hash.