Access the admin panel
The admin views are exposed from the same server as the chat UI.- Start nao chat locally (see the chat overview for details).
- Sign in with an admin-capable account.
- Navigate to the admin section from the UI navigation.
- Project - General project settings and Google OAuth
- Models - LLM provider configuration
- Agent - Agent settings and template prompts
- MCP Servers - Model Context Protocol server configuration
- Slack - Slack bot integration
- Team - User management
- Usage & Costs - Usage analytics, feedbacks, and chats replay (admin only)
Add Users
User management is available for deployed instances. If you’re running nao locally with
nao chat, user management is not required. For deployment instructions, see the Deployment Guide.- Navigate to Team in the left sidebar.
- Click the + button in the top right of the Users panel.
- Enter the user’s email address
- The user will then have to sign in with its email adress and the generated password.
The first user to sign up after deployment automatically becomes an admin. Additional users must be added through the admin interface. For more details on deploying nao, see the Deployment Guide.
Configure Google OAuth
Google OAuth configuration is for deployed instances. This allows users to sign in with their Google accounts instead of manually created accounts. For deployment instructions, see the Deployment Guide.
- Go to the Google Cloud Console
- Create a new project or select an existing one
- Navigate to APIs & Services → Credentials
- Click Create Credentials → OAuth client ID
- Configure the OAuth consent screen if prompted
- Select Web application as the application type
- Add authorized redirect URIs:
- Copy the Client ID and Client Secret
- Navigate to Project in the admin sidebar
- Scroll to the Google Credentials section
- Under Google OAuth (Override Env), enter your Client ID
- Click the ENV button to manage environment variables if needed
- Set the following environment variables in your deployment:
- Set the
GOOGLE_ALLOWED_DOMAINSenvironment variable: - Only users with email addresses from these domains will be able to sign up
Configure Slack integration
Connect your nao agent to Slack so your team can ask questions directly in Slack channels. Configure Slack integration from the Slack section in the admin sidebar, or see the Slack Bot guide for detailed setup instructions.Choose LLM models
Configure which LLM providers and models are available to your agent. Configure API Keys In the Models section of the admin panel:- If no API key exists in your environment variables: Enter your LLM API key directly in the UI
- If an API key exists in your environment variables: You can override it by entering a different key in the UI
Environment variables take precedence over UI configuration by default. Entering a key in the UI allows you to override the environment variable for that provider.
- Bearer token
- Set
AWS_BEARER_TOKEN_BEDROCK - Optional: set
AWS_REGION(defaults tous-east-1) - In Models, add provider AWS Bedrock, then configure model IDs
- IAM credentials
- Set
AWS_ACCESS_KEY_IDandAWS_SECRET_ACCESS_KEY - Optional: set
AWS_SESSION_TOKENandAWS_REGION(defaults tous-east-1) - In Models, add provider AWS Bedrock, then configure model IDs
- Navigate to Models in the admin sidebar
- Add or edit a provider (Anthropic, OpenAI, Google, Mistral, AWS Bedrock, or OpenRouter)
- Enter the model ID for each model you want to make available
- Users will only be able to select from the models you’ve configured
- Anthropic:
claude-sonnet-4-5,claude-opus-4,claude-haiku-4 - OpenAI:
gpt-4,gpt-4-turbo,gpt-3.5-turbo - Google:
gemini-2.0-flash-exp,gemini-1.5-pro,gemini-1.5-flash - Mistral:
mistral-large-latest,mistral-medium-latest - AWS Bedrock:
us.anthropic.claude-sonnet-4-6,eu.anthropic.claude-opus-4-6-v1 - OpenRouter: Various models from multiple providers
- Anthropic - Claude models
- OpenAI - GPT models
- Google - Gemini models
- Mistral - Mistral AI models
- AWS Bedrock - Claude and other models through Amazon Bedrock (supports bearer token or IAM credentials)
- OpenRouter - Access to multiple models from various providers through a single API
Configure MCP Servers
Use MCP Servers to expose external tools (for example BI tools, internal APIs, or other systems) to the nao agent. The actual server configuration lives in your nao-core project, in theagent/mcps/mcp.json file created by nao init. Once that file is present in the project linked to your deployment, you can manage it from the admin panel:
- Navigate to MCP Servers in the admin sidebar.
- See the list of MCP servers defined in your project.
- Enable or disable individual MCP servers for this deployment.
- Optionally restrict which tools from each server are exposed to users.
Configure Template Prompts
Customize prompt suggestions for your users in the chat. These prompts will be shown to your users in a new chat. These can be used to give your users examples of questions they can send to the chat.- Navigate to Agent in the admin sidebar
- Look for Template Prompts section
- Add example prompts that users can click to get started, such as:
- “What were our top 5 products by revenue last month?”
- “Show me user signups by country for the past quarter”
- “Compare this month’s sales to last month”
- “What’s the average order value by customer segment?”
Admin Monitoring
Learn how to track usage, feedback, and costs
Deployment Guide
Deploy nao chat to production with step-by-step instructions