ContextAll tenants
govern operations
Expose the server-derived environment and policy posture without leaking secrets or replacing production authorization with client-only controls.
Manage workspace defaults and notifications for the current server-derived organization scope.
Identity
Tenant, actor, and role are resolved on the server.
Credentials
Provider credentials are encrypted and never returned to the browser.
Emulation
Role emulation requires a reason, expires automatically, and is fully audited.
Production changes
Approvals, publications, domains, and control activation create attributable audit records.
Extension
Not tested
Connected user
Resolved after test
Version
Unknown
Permissions
Target-site access is requested only when needed
If the extension is missing, build or install it, reload this page, and test again. Leads always retain an Open manually fallback.
Run bounded, read-only checks against every configured platform integration without exposing credentials or provider payloads.
Verify every external service BrandLift uses without running a lead search, generating media, writing a file, or dispatching a queue job.
A configured-only result is explicit: the configuration is valid, but a live check would change state.
Statuses come from the server; credentials and provider payloads are never sent to the browser.
Select Verify all APIs to run this check.
Used by
Verification
Runs a bounded SELECT 1 through the shared Kysely connection pool.
Server configuration
DATABASE_URL
Select Verify all APIs to run this check.
Used by
Verification
Loads Google's authenticated API discovery document without running search, details, or photo operations.
Server configuration
GOOGLE_PLACES_API_KEY / GOOGLE_PLACES_LIVE_SEARCH_ENABLED / GOOGLE_PLACES_LEAD_DISCOVERY_AUTHORIZATION_REF
Select Verify all APIs to run this check.
Used by
Verification
Authenticates against Smartlead's campaign list endpoint without creating campaigns, sending email, or mutating leads.
Server configuration
SMARTLEAD_API_KEY
Select Verify all APIs to run this check.
Used by
Verification
Validates that the self-hosted runtime is configured for direct provider access without consuming generation tokens.
Server configuration
GOOGLE_GENERATIVE_AI_API_KEY, GEMINI_API_KEY, OPENAI_API_KEY, or ANTHROPIC_API_KEY
Select Verify all APIs to run this check.
Used by
Verification
Authenticates with the connected private store and lists only the reserved health-check prefix.
Server configuration
S3_* + BLOB_* bucket settings
Select Verify all APIs to run this check.
Used by
Verification
Validates queue region, topic names, and dispatch settings. It does not enqueue a billable or state-changing message.
Server configuration
MEDIA_GENERATOR_QUEUE_REGION / MEDIA_GENERATION_QUEUE_TOPIC / MEDIA_ASSET_QUEUE_TOPIC
Select Verify all APIs to run this check.
Used by
Verification
Reads active internal or external worker registration and recent heartbeat evidence. It never creates or claims a generation job.
Server configuration
Database-managed media_generator_connections / MEDIA_GATEWAY_IMAGE_WORKER_ENABLED / Object storage and durable queue dependencies
Select Verify all APIs to run this check.
Used by
Verification
Validates the BrandLift-owned PostgreSQL workflow runtime and reads the newest persisted workflow evidence without starting a run.
Server configuration
self_hosted_workflow_runs / CRON_SECRET
Select Verify all APIs to run this check.
Used by
Verification
Checks the protected cron configuration only. It does not invoke the route because that would dispatch pending work.
Server configuration
CRON_SECRET / systemd timer schedule
Select Verify all APIs to run this check.
Used by
Verification
Sends a HEAD request to the exact 2025 state-boundary archive used by the geography seed; this source is not called during normal requests.
Server configuration
No credential required