> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wearecorgi.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Admin commands

> Slash commands for admins to audit Token, manage its rules, and configure it.

Token has a few slash commands for admins. They run on the server directly and
bypass the AI entirely, so they are a reliable way to see and control what Token
is doing.

<Info>
  Slash commands are available in Slack and are admin-only. If you are not an
  admin, they will not be available to you.
</Info>

## /token-audit

See what Token has been doing: the actions it took, the decisions made, and the
outcomes.

```bash theme={null}
/token-audit            # the most recent entries
/token-audit today      # everything from today
/token-audit notion     # filter by a tool or service name
```

Each entry shows the action that ran, which channel triggered it, the decision
(allowed, denied, auto-allowed, or approved and by whom), and a timestamp. This
is the best way to review what happened while you were not watching, especially
actions that were approved automatically.

## /token-rules

View and manage the rules Token has learned from **Always allow**.

```bash theme={null}
/token-rules            # list all rules
/token-rules delete 7   # remove a specific rule by id
```

Each rule shows the actions it matches, any conditions, whether it was learned
from a button or set manually, and which channel it applies to. If Token is
auto-approving something you would rather review, delete the rule. The next time
Token tries that action, it asks again.

## /token-config

Manage workspace and owner settings.

```bash theme={null}
/token-config                                  # show the current configuration
/token-config workspace set <key> <values>     # update a workspace setting
/token-config workspace list                    # list workspace settings
/token-config owner set <key> <values>          # update an owner setting
```

Common settings include:

| Setting           | What it controls                                                                                            |
| ----------------- | ----------------------------------------------------------------------------------------------------------- |
| Internal domains  | The email domains treated as inside your organization, used to tell internal recipients from external ones. |
| Internal contacts | The phone numbers treated as inside your organization, used the same way for chat groups.                   |
| Admins            | Who is allowed to approve actions and run these commands.                                                   |
| Owner name        | The name Token uses when it refers to its owner.                                                            |

<Tip>
  These settings feed directly into [approvals](/permissions). For example,
  classifying a recipient as internal or external is what decides whether an
  action is auto-approved or needs a review.
</Tip>