Skip to content
FR
All projects
Private

Galaxxai ControlCenter

Private back office for Galaxx: projects, roadmaps, files, hours and payments — for the team and for AI agents.

Overview

Internal platform for Galaxx, a hybrid agency and in-house brands studio, served on galaxx.ai behind the public studio site. Projects with per-project access, missions, briefs, roadmaps, hours, payment requests, meeting notes, a full file manager and an inbox reader — usable by the team in the browser and by AI agents through a CLI and an MCP server, under one permission model.

Key technical specs

  • Nuxt 4 + Supabase back office: ~200 API routes, 46 pages and 60+ SQL migrations with row-level security on every table.
  • Invitation-only accounts with TOTP, passkeys (WebAuthn) and recovery codes; per-project access levels enforced server-side, with RLS as the safety net.
  • One permission model for three agent surfaces — REST, the galaxx CLI and an MCP server with 56 tools that call the REST layer in-process.
  • Personal API tokens hashed and shown once, 9 scoped domains (read / write), default-deny middleware and a test that fails if any endpoint is left unclassified.
  • File manager with direct-to-storage signed uploads (resumable TUS for large files) and in-browser previews of PDF, Office, code, media and 3D GLB — no server worker.
  • Docs mirror: each repository's docs/ published read-only into the app through a CLI + GitHub Action, with a database trigger refusing any other write.
  • Performance pass: API calls cut from 700–930 ms to 100–190 ms with functions pinned to Paris next to the database, stale-while-revalidate revisits painting in ~40 ms, and Server-Timing on every response.
  • Mail reader for Gmail, Outlook and Zoho over OAuth, tokens encrypted at rest with AES-256-GCM; 1,200+ Vitest unit tests across 99 files.