MCPTotal includes dashboards that provides users and admins with a summary view of activity.

The user dashboard

You access the user dashboard by selecting the User toggle in the main menu and clicking Home.

The user dashboard consists of 3 sections:

1. Quick Start, which provides shortcuts to key MCPTotal features. This section can be dismissed from the dashboard page when no longer needed.
2. Space activity overview.
3. Most recent activity log records.

The spaces card

In this section, you can select a space (1) and see:

2. The space’s status:
   1. indicating the space is ready to receive and process requests.
   2. indicating MCPTotal has suspended the space due to inactivity.
   3. indicating the space is starting up, having been resumed.
3. A list of apps installed in the space, with buttons to add another app, open the playground (MCPTotal chat), and an expandable card to display the resources used by the space (e.g., memory, CPU, and network).
4. The space's endpoint details, including buttons to add the endpoint to Cursor or VS Code, and an expandable section that lets you copy the space's API key and shareable link.
5. A list of sessions: instances of IDE or AI agent use of the space.
6. The most recent logs of activity in the space, showing the time, the activity app, and the message type. You can expand each line to view the activity's event details.

In addition, there is a menu (7) that provides options to view audit logs, access the space dashboard settings, share the space, and delete the space, along with a link (8) to the spaces page.

The Your Activity card

The Your Activity card displays the 5 most recent logs of activity across all your spaces. The information includes: the time of the log, the event, the space in which the event took place, the MCPTotal app involved, the potential security severity of the activity, and the activity's HTTP status. You can expand each row to see the information in detail and view all activity logs by clicking View all.

See Audit log events and Audit log severity for more information on the severity and event items.

The admin dashboard

You access the admin dashboard by selecting the Admin toggle in the main menu and clicking Overview.

The admin dashboard consists of 6 sections:

1. Quick Start, which provides shortcuts to key MCPTotal features. This section can be dismissed from the dashboard page when no longer needed.
2. A list of the most recent alerts, with a link to view the full list.
3. A list of the most recent activity, with a link to view the full list.
4. A list of the most recent sessions, with a link to view the full list.
5. A list of recently used spaces, with a link to view the full list.
6. An invite to explore MCPTotal as a user.

Alerts

Alerts provide details for audit logs of activities identified as potentially critical security events. The detail screen provides:

1. Options to search for words or phrases in the alert log records.
2. A summary line for an alert, showing the time of the activity, the event that took place, the space, the app that the event took place in, the severity of the event, the user, and the status (standard HTTP response status code).
3. An expandable section that shows the full audit log for the alert.

Recent activity (audit log)

The activity log records every activity in a space. The detail screen includes:

1. Options to filter activity log by the severity of the log item or the presence of a search word in the log records.
2. A summary line for an activity, showing the time of the activity, the event that took place, the space, the app that the event took place in, the severity of the event, the user, and the status (standard HTTP response status code).
3. An expandable section that shows the full audit log.

Audit log severity

The severity of an audit log can be:

• Critical — security incidents: policy blocks, guardrail threats, and unauthorized access (all calls via 403 at runtime).
• High — privilege-sensitive: user or role management, auth failures, API key exposure, policy changes, and scans.
• Medium — state-changing operations: app installs, connections, space mutations, MCP tool calls, and AI execution.
• Low — read-only: listings, status checks, views, and MCP enumerations.

Audit log events

These events are recorded in the audit log: