Admin Portal

Operations

Pause and recovery controls. None wired up yet — these will land with the 2FA-protected admin role in a follow-up phase. Documented here so you know which levers exist.

Refill paymaster

pending

Send ETH from treasury to the paymaster's EntryPoint deposit. Re-enables AFG-paid UserOps when the deposit runs low.

Refill faucet

pending

Transfer AFG from treasury to the faucet operator. Resets the daily drip budget.

Pause faucet

pending

Reject /api/faucet requests with 503. Use during abuse incidents or maintenance.

Pause bridge

pending

Reject /api/bridge deposits. The OP Stack pause-guardian role can also halt the L1 bridge contract.

Rotate hot keys

pending

Generate new sequencer / batcher / proposer keys, transfer balances, restart op-* services.

Restart bundler

pending

Restart the Rundler container. Use after settings changes or to clear a wedged mempool.

Trigger backup

pending

Snapshot pebble chaindata + postgres dumps + DAS storage. Off-host, encrypted.

View server logs

pending

Tail logs from Caddy / nitro / op-* services. Loki integration pending.

Why these are stubbed: Each control needs (1) an authenticated operator session, (2) RBAC rules so support-admin can refill but not pause, and (3) audit logging. Auth lands in the next phase; the actions are one-line cast/curl commands once that's wired up.