Sign in with an operator account. First super_admin if needed: POST
/api/v1/admin/auth/bootstrap with header
X-Admin-Token.
Code from Google Authenticator (or a backup code)
Scan the QR in Google Authenticator and enter the 6-digit code
Dashboard
Loading…
—
Admin quick start
Pick a flow: metrics overview, client work, accounts, plans, or support.
Live snapshot — inventory, limits, card lifecycle, and spend in the grids below use the
last /api/botcartd/state response (browser).
Server aggregates — top-ups, ledger fees, decline reasons, and 3DS code counts load from
GET /api/v1/admin/analytics/overview (SQLite: wallet_ledger, arqen_webhook_transactions, codes_3ds).
Coverage is partial if webhooks or ledger are empty. “Available” spend is still an estimate (~85% of assigned limits).
Issuer balances
Issuer balance — EUR—· from account (live)
Issuer balance — USD—· from account (live)
Manual operator estimates — runway, pending settlements, holds (saved to DB; not from issuer APIs)
Runway estimate
days (based on avg daily net outflow for the period)
Liquidity & exposure (manual)
Pending settlements
EURUSD
Provider holds / reserves
EURUSD
Cards (inventory & usage)
Active cards
Active cards — EUR
Active cards — USD
Active cards — Total
EUR
Total assigned limit—
Available to spend (free limit)—
USD
Total assigned limit—
Available to spend (free limit)—
Card lifecycle (period)
New cards created—
Closed cards—
Money Flow (Top-ups vs Spend)
Top-ups
Today—
Yesterday—
Last 3 days—
Top-ups count (today)—
Avg top-up size (3d)—
Spend
Today—
Yesterday—
Last 3 days—
Transactions count (today)—
Avg transaction size (3d)—
Net flow (Top-ups - Spend)
Today—
Last 3 days—
Revenue (fees)
Fees collected
Today—
Yesterday—
Last 3 days—
MTD—
Fees breakdown (period)
Top-up fees—
FX fees—
Card fees (issue/monthly/other)—
Transaction Quality (approval/declines)
Approval
Approval rate (3d)—
Decline rate (3d)—
Pending volume—
Top decline reasons (3d)
Insufficient funds—
Do not honor—
3DS required/failed—
Other—
Global webhook transactions (support / anti-fraud)
SQLite arqen_webhook_transactions + card index — не заменяет вкладку Client.
—
Merchants
Declines
MCC
Clients (volume)
Clients (declines)
Operator sessions
—
—
3DS & Risk Ops
3DS requests today—
3DS approval rate (3d)—
3DS expired (3d)—
System / Provider Health
Provider API status
Webhook lag (p95)
s
Error rate (1h)
%
Failed webhooks (24h)
Client admin
Client
End-user key (clientMeta)
Profiles (SQLite)
Client: — · ID: — · Status:
ID:
·
Created:
·
Last active:
Tariff
The list includes hidden-from-home plans so you can assign them here; the client will see the plan and pricing in the app after save.
Current tariff—
Tariff since—
Change tariff to
Tariff notes
Subscription (API)
Subscription limits for the selected profile (from /state?externalUserId=).
Plan—
Cards included—
Active cards—
Slots left (included)—
Max active (cap)—
Next card issue fee—
Can create cards—
Issue card (API)
Currency / monthly limit
Access & limits
Banned
Can create cards
Max active cards (override)
Set balance USD
Demo wallet EUR
Demo wallet USD
Top up wallet
Top-up amount
Quick top-up
Balances
Balance (EUR)—
Balance (USD)—
Reserved / pending (EUR)—
Reserved / pending (USD)—
Net deposits (lifetime) (EUR)—
Net deposits (lifetime) (USD)—
Spend (lifetime) (EUR)—
Spend (lifetime) (USD)—
Fees paid (lifetime) (EUR)—EUR estimate: USD fees ÷ FX rate from state
Fees paid (lifetime) (USD)——
Activity (recent)
Top-ups today—
Top-ups last 3 days—
Spend today—
Spend last 3 days—
Transactions today—
Approval rate (3d)—
Decline rate (3d)—
Cards (overview)
Total cards—
Active cards—
Closed cards—
Cards in EUR—
Cards in USD—
Total assigned limit (EUR)—
Available to spend (EUR)—
Total assigned limit (USD)—
Available to spend (USD)—
Risk / 3DS
3DS requests (today)—
3DS requests (7d)—
3DS approval rate (7d)—by codes
3DS expired (7d)—
Top-ups (latest, auto)
From wallet_ledger / Activity (wallet top-up lines). Per-tx fee split is not stored — fee shows as —.
Latest top-up #—
Latest top-up status—
Latest top-up currency—
Latest top-up received—
Latest top-up fee—
Latest top-up net—
Latest top-up created—
Transactions (latest)
Latest transaction #—
Latest transaction status—
Latest transaction merchant—
Latest transaction amount—
Latest transaction currency—
Latest transaction MCC / country—
Latest transaction FX / fees—
Latest transaction date—
Notes / Ops
Internal note
Support owner
Last admin action—
Last admin action time—
Client cards (list)
Client top-ups (list)
Client transactions (list)
B2B account pool — load and audit Arqen profiles
Pool statistics—
Groups / invites
Upload B2B profiles
JSON array of profiles (spec format). Each profile is validated via the Arqen token flow before saving.
Home catalog matches GET /api/botcartd/plans (what clients see in “Change plan”).
Hide from home — тариф не показывается на главной и его нельзя выбрать самому (
POST /api/botcartd/plan/select
вернёт ошибку). Назначить такой тариф можно только админом (пользователь в кабинете увидит свой план и условия как обычно).
Тариф в админке задаётся только в EUR (абонемент и комиссии). Те же числа сохраняются в полях *Usd в конфиге для совместимости API — отдельной долларовой цены нет.
Поле bullets — произвольный текст для экрана клиента.
Partner ads per client tab (GET /api/botcartd/banners, field
page: main, card, 3ds, tx, profile). Clicks counted via redirect.
Image size (recommended):1200 × 375 px
(aspect ratio 16∶5 — same as the client placeholder). WebP or JPEG, roughly
< 400 KB
for fast load. Very tall images add empty space under the picture; very low/wide crops look small on phones.
Web sign-ups (web_users): email, status, link to
external_user_id (tg_…). API:
GET /api/v1/admin/web-users · CSV:
?format=csv · delete row:
DELETE /api/v1/admin/web-users/<id>
—
Support settings
Support contact
Working hours
Average reply time
Reply-time templates (applied to “Average reply time”)
Lookup by ID
ID
—
Full list of emails and external_user_id — see the
Web users tab.
Operator audit log (admin_audit_log). Filters are optional; newest first.
—
—
Admin panel operators (super_admin). Extra admins only from the primary account in .env; 2FA is set at sign-in; reset with the button below.