Skip to content
Open icLens

Routes and navigation

icLens is organised in places. Global places have their own path; workspace places live under /w/{workspace}, where {workspace} is browser (This browser, the inventory saved in your browser) or an Agent’s canister ID (the inventory shared through that Agent). Mainnet is implicit. Documentation routes are separate from the application.

Place Path Shown to
Home / Everyone
Inbox /inbox People with an Agent
Discover /discover/network and the pages below Everyone on Mainnet
Settings /settings/account and the other Settings pages Everyone
Workspaces /workspaces, /workspaces/new/manual (set up with icp-cli) Everyone can browse
Page Path Time range
Network /discover/network Yes
Subnets, a subnet /discover/subnets, /discover/subnets/{subnetId} Yes
Governance, a proposal /discover/governance, /discover/governance/{proposalId} No
Chain Key /discover/chain-key No
SNS projects, a project /discover/sns, /discover/sns/{rootCanisterId} and /canisters, /governance, /token No

Pages that show the present have no time range; an unknown Discover address is not found. Discover’s evidence (subnets, nodes, proposals and SNS projects) is published for Mainnet only, so on a local network Discover is not offered and its addresses say so, with Use Mainnet to review switching back.

Place Path Shown to
Canisters /w/{workspace}/canisters Everyone
Compare two canisters /w/{workspace}/canisters/compare?pick={left}&pick={right} People with read access to those two current-workspace records; shared time-range parameters are preserved
Add a canister /w/{workspace}/canisters/new People who can edit the selected inventory
Create a canister /w/{workspace}/canisters/create Signed-in people paying as You through OISY
A canister /w/{workspace}/canisters/{canisterId} and its sections Everyone
Monitor /w/{workspace}/monitor/alerts People with an Agent
Telemetry · Metrics /w/{workspace}/telemetry/explore/metrics, with queries in qa…qd People with an Agent
Telemetry · Logs /w/{workspace}/telemetry/explore/logs People with an Agent
Telemetry · Frontends /w/{workspace}/telemetry/explore/frontends; a frontend /frontends/{hostname} with /pages, /issues, /calls, /events, /visitors, /settings/{collection|privacy|site|collector}; details /pages/{code}, /issues/{id}, /calls/{code}, /timelines/{id}, /releases/{code}; setup /frontends/new/{site|collector|storage|record|connect} Members of the workspace’s Agent; collection changes need an active Agent Admin; source-map uploads require both active Agent Admin status and independent protected-host upload authority
Telemetry · Traces /w/{workspace}/telemetry/explore/traces with canister, operation, status, attr and order; a trace /traces/{traceId} with view and span; the service map /traces/map with service, lens, compare and zoom Members of the workspace’s Agent
Telemetry · Dashboards /w/{workspace}/telemetry/dashboards, a dashboard /dashboards/{id}, its editor /dashboards/{id}/edit, a new one /dashboards/new/edit Members of the workspace’s Agent; editing needs Read-write
Telemetry · Reports /w/{workspace}/telemetry/reports, a run /reports/runs/{runId} Members of the workspace’s Agent
Cycles /w/{workspace}/cycles/reserve People with an Agent
Activity /w/{workspace}/activity Everyone
Agent /w/{workspace}/agent/overview Everyone
Set up an Agent /w/browser/agent/setup, with canister, with, agent and returnTo Everyone; its first step signs in

This browser has Canisters and Activity. Its Agent address opens Set up an Agent, one flow from signing in to a running Monitor: create an Agent canister (name and network, pay, create) or connect one your team runs, then add canisters and start Monitor. canister names the canister setup is for: the flow is titled Monitor and the canister’s name, and ends on that canister in the new workspace. with=create or with=connect opens it at its second step with that choice made. Signed in with Agents, the Agent address lists Your Agents to open one, or add another. Its Monitor, Telemetry and Cycles addresses, and its Activity audit (?kind=audit), show Needs an Agent with the way to set one up; a Telemetry link that names a canister says so (“Logs for payments-api need an Agent canister”) and sets one up for it.

Agent workspace URLs require a restored application identity and live access to that exact Agent on the selected network. While session or workspace restoration is pending, one condition screen replaces the protected page. Signing in after expiry retains its URL, section and time-range query. Explicit sign-out returns to Home. Public inspection and This browser remain available signed out.

Connecting accepts agent to prefill a validated Agent principal and returnTo for an internal workspace destination. After connection, returnTo is accepted only for the connected Agent on the active network. An external, malformed, different-workspace or different-network destination is ignored; the flow then opens that Agent’s Canisters page. These parameters grant no role or execution authority.

For example, inspecting a canister in This browser:

/w/browser/canisters/ryjl3-tyaaa-aaaaa-aaaba-cai

A canister’s sections are overview (the bare URL), timeline, cycles, code, snapshots, settings, web, api and placement. Signed out in This browser, the page is the canister’s public view, with its Overview, Timeline, Code, API and Placement; another section’s address is not found. The Timeline’s show parameter opens one kind of evidence, such as timeline?show=changes; it never starts a watch of live calls.

Opening a link never grants authority. What you can do on a canister is decided for each action from live facts: an Agent can run an action when it controls the canister and your role in it allows the action; you can when you control the canister; anyone can top one up. The review names who will run it (Run as) and checks again just before running it.

The workspace switcher at the top of each workspace place’s panel (the top bar on phones) opens the same place in another workspace. Global places lead to the last workspace you opened while it is still yours, otherwise your default Agent, your first Agent, or This browser.

Field Values Purpose
from now-5m, now-1h, now-6h (default), now-24h, now-7d, now-30d, now-1y, now-5y, or a nanosecond start The time range on places that show time: a relative range follows now
to Nanosecond end, with a nanosecond from A fixed (absolute) range
tz utc Shows times in UTC; without it they use the browser’s time zone
view all, attention, low-cycles, stopped, stale The Canisters workspace view
pick Repeated canonical, nonanonymous canister principal; at most 250 distinct values The checked inventory set, independent of Quick view; invalid or absent entries block the whole bulk review
access controls, observes Narrows the inventory by the workspace runner’s access
status needs_attention, low_cycles, memory_high, stopped, stopping, stale, healthy Narrows the inventory by current evidence
subnet, tag Subnet ID, tag name Additional inventory filters
sort, order name, status, cycles, last_activity; desc Inventory sort; default is cycles, low first. Last activity requires complete evidence for the selected window
saved Saved-view ID Marks the selected shared view; its filters are also in the URL
all 1 Shows every matching row instead of the first ten

Changing the time range replaces the current history entry, so Back returns to the previous page rather than the previous range. The arrows beside the range step it back or forward by its own length; stepping back fixes the range, and stepping forward to now returns to the relative range. A fixed range does not move: Back to now chooses the shortest relative range that covers it, and Refresh keeps its bounds. Malformed, ambiguous or unordered bounds are reported and the default range is shown meanwhile.

The range opens a short list of quick ranges, recent ranges and the time zone; Custom range… opens the calendar with typed From and To. On phones the range and its freshness sit in a row under the top bar.

In an Agent workspace the picker disables ranges shorter than two Monitor passes (they hold at most one reading, so no rate or burn) and ranges longer than the Agent’s history, each with its reason. The last three fixed ranges you applied are offered again in this browser.

Palette actions open the current inventory Quick view with one review=topup or review=snapshot intent and its exact sel target. The target must resolve in that workspace before a review opens. A URL grants no authority, never confirms an operation and never replays it. Duplicate or unsupported review intents are ignored; closing the review clears the intent.

Keys Action
⌘K or Ctrl+K Search, or inspect a canister by its ID
[ Show or hide the panel
G then H, C, M or T Go to Home, Canisters, Monitor or Telemetry
R Refresh the page
? Show the keyboard shortcuts

Addresses from the earlier screens, which began with a network such as /mainnet/… or /local/…, are retired. They and any other unknown address show This page does not exist inside the application. They never redirect, change the network or workspace, or grant access. Open the place from the navigation, or use the paths above.