Settings

Loading settings…

LLM Providers

No providers configured. Click "Add Provider" to get started.

Saved Model Profiles

No saved profiles. Enter a profile name above and click "Save Profile".

Platform Connectors

No connectors configured. Click "Add Connector" to get started.

Test the connection before saving.

Leave the masked value unchanged to keep the existing secret.
Test the connection before saving.

Agent Configuration

Personality Templates

Safety (HITL)

Context Window

Connectors have moved

LLM providers and all platform connector tokens are now managed in the unified "Providers & Connectors" tab.

Gateway Adapters

Connector changes are auto-applied on save. Use this button to manually reload all adapters without restarting the server.

MCP Servers

No MCP servers configured. Add one to extend Kazma's tool capabilities.

Add Server

Installed Skills

No skills installed. Browse the skill marketplace to add capabilities.

Theme

Accent Color

Font Size

Layout

Custom CSS

Keyboard Shortcuts

⚠️ Conflicts Detected

Change Password

API Tokens

Use these tokens to call protected APIs from scripts without pasting KAZMA_SECRET. Send as Authorization: Bearer … or X-Api-Token.

Token created — copy now (shown once)
No API tokens

Active Sessions

No active sessions

Platform users

Multi-user access control (viewer / operator / admin). Backend: · Postgres multi-replica ready · OIDC enabled

No platform users yet. Add one above, or keep using the shared server secret.

Tenants

Tool Registry

No tools registered. Tools are added via MCP servers or local tool definitions.

System Diagnostics

Uptime
CPU
Memory
Disk Free
Python

Secret Vault

Vault Enabled Vault Disabled
Set KAZMA_VAULT_KEY in .env or restart the server to auto-generate one.
The agent can store and retrieve encrypted secrets (API keys, tokens, passwords) using the vault_store and vault_retrieve tools. Retrieval requires HITL approval.

System Logs

No logs available

Backup & Maintenance

Packages & Dependencies

packages installed · Python

Active DB backend: KAZMA_DATABASE_URL set Set KAZMA_DATABASE_URL + install .[postgres] for multi-replica

Extras Active
Missing

Optional Dependencies

Loading…

Core Dependencies

Package Version Description
No matching packages

Install Everything

To install all optional dependencies at once:

$ uv sync --all-extras

Export Configuration

Download your complete Kazma configuration.

Import Configuration

Upload or paste a configuration file to import settings.

Reset to Defaults

Clear all saved settings and revert to factory defaults. This cannot be undone.

Connect email

Gmail, Microsoft 365/Outlook, or sandbox demo mailbox for the agent.

Active provider (auto)

Chat uses auto: real account if connected, otherwise sandbox. Banner shows [sandbox|gmail|gmail_pop|microsoft_graph|microsoft_imap|imap|pop] mode.

Sandbox

Always available

Local SQLite demo mailbox — no credentials. Safe for testing list/analyze/send drafts.

Try in chat: “List my inbox” or “Analyze the lottery email”.

Gmail / Google Workspace

Address:

Recommended for Google Workspace: sign in with Google OAuth (no app password). Uses Gmail API.

OAuth client:

Google Cloud Console → OAuth Web client. Authorized redirect URI must include /api/email/oauth/gmail/callback

IMAP + SMTP with a Google App Password (enable IMAP in Gmail settings). Workspace often blocks this — prefer OAuth.

imap.gmail.com:993 · smtp.gmail.com:587

Google Account → Security → App passwords. Not your normal Gmail password.

POP3 + SMTP with a Google App Password (enable POP in Gmail). Inbox-only; prefer IMAP or OAuth when possible.

pop.gmail.com:995 · smtp.gmail.com:587

Microsoft 365 / Outlook

Address:

Sign in with Microsoft in the browser (authorization code). Best for M365/Outlook. Device code is optional fallback.

Azure app redirect URI must include /api/email/oauth/microsoft/callback (and your public host).

Alternative: device code (no browser redirect)

Open the link and enter this code, then approve mail access:

Polling for authorization… keep this page open.

IMAP + SMTP to Outlook/M365 (outlook.office365.com). Many tenants disable basic auth — use OAuth if login fails.

outlook.office365.com:993 · smtp.office365.com:587

POP3 + SMTP to Outlook/M365. Limited features vs Graph/IMAP; basic auth may be blocked.

outlook.office365.com:995 · smtp.office365.com:587

Multi-account aliases (env)

Configured via EMAIL_ACCOUNTS / EMAIL_ACCOUNT_* environment variables.

Full setup notes: Email integration guide

Voice Subsystem

Configure speech-to-text (STT) and text-to-speech (TTS) engines.

Speech-to-Text (STT)

No models loaded — pick Custom or change provider.

NVIDIA Whisper is a Speech NIM (self-hosted), not a chat model on integrate.api.nvidia.com. Set the ASR base URL below, or use groq/openai for cloud STT.

Type any specific custom transcription model name.

OpenAI-compatible root of your Speech NIM (must expose /v1/audio/transcriptions). Do not use the LLM integrate.api.nvidia.com URL.

Use "auto" or ISO-639-1 format.

Text-to-Speech (TTS)

e.g. provider voice ID, or a local file path.