Deploy & Operate

Install, configure, secure, monitor, back up, and upgrade — for the team running the platform.

These docs are aimed at administrators, SREs, and platform engineers — the team that installs Curiosity Workspace, keeps it running, and stays on the hook when something breaks.

If you're a developer learning the platform, the starting point is Learn Curiosity Workspace. If you're shipping a domain-specific app — custom front-end, custom endpoints, or AI tools — see Build enterprise AI apps.

Pick your path

Install

Pick a delivery platform and bring up your first workspace. Local Docker, full Kubernetes, Windows installer, and per-cloud reference architectures.

Secure

TLS, secrets, JWT keys, ReBAC, token discipline. The baseline that has to be in place before real users sign in.

Identity (SSO)

Microsoft Entra ID, Google, Okta, Auth0, SAML. With group → team mapping for ReBAC.

Production deployment

The full pre-flight checklist: image hygiene, storage, networking, identity, observability, disaster recovery.

The admin console

Every page under Manage, what it configures, and where the deeper documentation is. The map to start from.

Observability

Active chats, queries, queues, usage, LLM cost, agent metrics, uptime and logs, and which page answers which question.

Debugging access

Why a user can or cannot see a node, and the pages that decide who may call an endpoint or an AI tool.

Monitor

What to watch, what to alert on, where the metrics live, how to wire it to your existing observability stack.

Back up and restore

Snapshot, ship off-host, restore into a sandbox, and validate. With a quarterly drill template.

Upgrade and migrate

Versioned image tags, schema migrations, environment promotion.

Troubleshoot

Symptom-first guide. Each section walks from "what you're seeing" to the most likely cause and how to confirm.

Reference

Configuration reference (MSK_*)

Every runtime environment variable, with recommended values per environment tier.

Token scopes

The three token types and least-privilege recipes for connectors, exports, and third-party integrations.

Error codes

HTTP status codes, the error envelope, retry policies.

REST API

Built-in routes (auth, SSO, custom endpoint invocation, admin metrics).

Need help?

Community Support — ask questions and share your projects.
Report Issues — found a bug? Let us know.
Architecture overview — what's actually inside the container.