Edison Watch

Dashboard Overview

Navigate the Edison Watch dashboard and understand its main features.

The dashboard is your command center for monitoring and controlling AI activity across your organization.

Layout

Main dashboard

The dashboard uses a sidebar on the left for navigation and a main content area on the right.

SectionWho sees itPurpose
OverviewAll usersPending requests and security insights.
SessionsAll usersMonitor AI session history and tool calls.
My MCPsAll usersView and test your personal MCP servers.
SettingsAll usersEncryption keys, credentials, and preferences.
ServersAdminsManage MCP servers for the organization.
UsersAdminsManage users, roles, and invitations.
PoliciesAdminsCreate and manage CEL-based policy rules.
Access ControlAdminsConfigure roles and element-level permissions.
LogsAdminsAudit logs and system activity.

Each page shows a Docs link in the header (book icon) that opens the documentation for that specific page.

Admins with multiple organizations see an org filter dropdown to scope the view to a single org or view all orgs at once.

Overview Page

The Overview page (/dashboard/overview) is the landing page after sign-in. It shows:

  • Pending server requests — users requesting access to new MCP servers.
  • Pending quarantine requests — servers blocked by the client app awaiting approval.
  • Security insights — recent policy violations and risk patterns (admins only).

Sessions View

The Sessions view at /dashboard/sessions is the primary monitoring interface.

Sessions view

Each row in the sessions table shows:

ColumnDescription
TimeWhen the session started.
UserThe person who started the session.
AgentThe AI agent (e.g. Claude, Cursor).
CallsTotal tool calls in the session.
StatusActive, completed, or blocked.
RiskLow (green), Medium (amber), or High (red).
ACLHighest sensitivity level accessed.
P/U/EColored dots: Private (blue), Untrusted (amber), External (red).

Click Show on any row to expand the full tool call timeline.

Understanding Security Flags

Edison Watch tracks three data-flow flags per session:

FlagDotTriggered by
Private dataBlueReading files, databases, or internal documents.
Untrusted contentAmberFetching web content or calling external APIs.
External commRedSending emails, Slack messages, or external API calls.

A session with all three flags set is a Trifecta — the highest-risk combination. Use the Trifecta filter on the Sessions page to find these sessions.

Risk Levels

LevelFlagsIndicator
Low0Green
Medium1Amber
High2+Red

ACL Levels

LevelMeaning
PUBLICNo sensitive data accessed.
PRIVATEInternal/confidential data accessed.
SECRETHighly sensitive data accessed.

Tip: Use the date range filter and security flag filters together on the Sessions page to investigate specific incidents.

On this page