Your PME Server identity. Agents sign in with the same account to register mesh nodes and share access.

New accounts get a 30-day PME Relay trial (no card required). After trial, Mesh Pro keeps relay and adds higher agent and invite limits. VPN invites sent counts invites you created (any state). Received invites do not count toward your limit.

Received an invite? Select it and tap Accept to open VPN tunnel setup with your WireGuard QR and shared app links. Use Remove to hide a received invite from your account only. Invites are created and revoked on your home agent or edge.

Shared web apps from invitations in the Accepted state. Connect VPN first, then open an app link or scan its QR code.

Everyone registered on this PME Server. Each account can own agents, send invitations, and accept invites from others.

Agents blocked by an admin. Blocked agents cannot use the control stream or create invites until unblocked here. Blocking does not delete the agent row.

Regional WireGuard relay fleet for Mesh Pro homes without router UDP forward. Data-plane metrics (bytes/packets) live on each relay pod — not stored in Postgres yet. See docs/runbooks/pme/RELAY.md.

Relay registry

Add relay

Hostname Endpoint Region

WSS URL UDP host Status active inactive

Create relay

Control-plane audit trail, request health, and recent server logs (admin only). Use the runbook docs/runbooks/pme/SECURITY-MONITORING.md for weekly checks and Loki queries.

Audit summary

Server log tail

In-memory ring buffer (last ~500 JSON lines). Pod restart clears this; durable audit rows stay in Postgres.