Puddle
Sign in to your data workspace.
WorkOS AuthKit handles SSO, passkeys, MFA, and identity. Puddle mirrors the signed-in actor into org/workspace context before every Worker API request.
AuthKit is not configured locally
Set WORKOS_API_KEY, WORKOS_CLIENT_ID, WORKOS_REDIRECT_URI, and PUDDLE_SESSION_SECRET to enable the hosted login flow. The demo shell remains available.
Row access remains enforced by Postgres RLS after authentication.