Internal AdminAffiliate operations workspace
Admin

Integrations

Integration readiness

Internal MVP readiness checks for external services. Status is based on environment variables only; secret values are never displayed.

OpenAI

Setup neededMissing 1 required environment variable.

Meta Ads

Setup neededMissing 2 required environment variables.

Affiliate Network

Setup neededMissing 1 required environment variable.

Stripe

Setup neededMissing 1 required environment variable.

Service readiness

Environment-variable status only. Add real sync logic behind these endpoints when each provider contract is ready.

ServiceStatusRequired environmentMissingStub action
OpenAI

AI recommendation generation can layer plain-English guidance on top of local rule-based signals.

Setup needed

OpenAI API key: Missing

OPENAI_API_KEY
Meta Ads

Campaign sync will import spend, clicks, CTR, and campaign identifiers from Meta Ads.

Setup needed

Meta access token: Missing

Meta ad account ID: Configured

Meta API version: Missing

META_ACCESS_TOKEN, META_API_VERSION
Affiliate Network

Commission sync will reconcile clickouts, conversions, payouts, and offer-level commission records.

Setup needed

Affiliate network API key: Missing

AFFILIATE_NETWORK_API_KEY
Stripe

Revenue sync is reserved for billing, revenue, and expense reconciliation once payments enter the MVP.

Setup needed

Stripe secret key: Missing

STRIPE_SECRET_KEY

Integration health summary

Admin-facing retry guidance based on current credential readiness and the latest sync log per provider.

ServiceHealthLatest syncMissing credentialsRetry guidance
OpenAI

AI recommendation generation can layer plain-English guidance on top of local rule-based signals.

Missing credentialsNo sync loggedOPENAI_API_KEYAdd 1 missing environment variable before retrying.
Meta Ads

Campaign sync will import spend, clicks, CTR, and campaign identifiers from Meta Ads.

Missing credentialsNo sync loggedMETA_ACCESS_TOKEN, META_API_VERSIONAdd 2 missing environment variables before retrying.
Affiliate Network

Commission sync will reconcile clickouts, conversions, payouts, and offer-level commission records.

Missing credentialsNo sync loggedAFFILIATE_NETWORK_API_KEYAdd 1 missing environment variable before retrying.
Stripe

Revenue sync is reserved for billing, revenue, and expense reconciliation once payments enter the MVP.

Missing credentialsNo sync loggedSTRIPE_SECRET_KEYAdd 1 missing environment variable before retrying.

Account and key checklist

Accounts, IDs, and secrets to collect before wiring real integrations. Secret values stay in environment variables only.

PriorityAccountCollectEnvironment statusNotes
required
Internal admin security

Protects the production admin dashboard, import APIs, and integration action endpoints.

Strong admin password, Long random session secret, Approved admin email list
Partial

ADMIN_PASSWORD, ADMIN_SESSION_SECRET, ADMIN_ALLOWED_EMAILS

Missing: ADMIN_ALLOWED_EMAILS

Store secrets only in the deployment environment or a password manager. Keep the password as backup even after SSO is enabled.
soon
Microsoft 365 / Entra admin sign-in

Lets approved admins sign in with Microsoft accounts such as ian.lange@iglholdings.com.

Application/client ID, Client secret, Tenant ID or organizations authority, Redirect URI
Not started

MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET, MICROSOFT_TENANT_ID

Missing: MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET, MICROSOFT_TENANT_ID

Register https://app.iglholdings.com/api/auth/microsoft/callback as a Web redirect URI.
required
PostgreSQL database

Stores offers, landing pages, campaigns, performance rows, leads, tracking events, settings, and sync logs.

Production database URL, Backup/restore access, Database owner credentials
Ready

DATABASE_URL

Use a managed or hardened Postgres instance before real traffic.
soon
OpenAI Platform

Enables AI-written recommendations after the local rule engine creates baseline recommendations.

Project API key, Usage budget/limits, Billing status
Not started

OPENAI_API_KEY

Missing: OPENAI_API_KEY

The app falls back to rule-based recommendations until this key is configured.
soon
Meta Business, Ads Manager, and Developer App

Needed to import campaign spend, clicks, CTR, CPC, and campaign identifiers from Facebook/Instagram ads.

Meta access token, Ad account ID, Graph/Marketing API version, Pixel or Dataset ID
Partial

META_ACCESS_TOKEN, META_AD_ACCOUNT_ID, META_API_VERSION

Missing: META_ACCESS_TOKEN, META_API_VERSION

Keep campaign launches and budget changes manual even after read-only import is wired.
soon
Affiliate or referral network accounts

Needed to reconcile clicks, conversions, commission status, payouts, and offer rules.

Network API key, Network base URL, Network/account ID, Program terms, Placeholder-safe affiliate links
Not started

AFFILIATE_NETWORK_API_KEY, AFFILIATE_NETWORK_BASE_URL, AFFILIATE_NETWORK_ID

Missing: AFFILIATE_NETWORK_API_KEY, AFFILIATE_NETWORK_BASE_URL, AFFILIATE_NETWORK_ID

Offer-level rules still need to be reviewed before any offer can become active.
soon
Domain, DNS, and hosting provider

Needed to run compliant public landing pages on a real domain with TLS.

Domain registrar login, DNS access, Droplet or hosting account, SSH deploy key
Ready

NEXT_PUBLIC_APP_URL

Current launch docs assume iglholdings.com, app.iglholdings.com, and go.iglholdings.com on DigitalOcean.
soon
Business email

Needed for partner accounts, recovery contacts, affiliate program communication, and compliance contact details.

ian.lange@iglholdings.com mailbox access, Email provider login, MX record owner
Ready

No app env var yet

Keep MX records stable unless intentionally changing email providers.
later
Stripe

Reserved for future billing, revenue, or expense reconciliation if the internal tool becomes paid or needs payment records.

Secret key, Webhook signing secret if webhooks are added
Not started

STRIPE_SECRET_KEY

Missing: STRIPE_SECRET_KEY

Not required for the current internal MVP workflows.
later
Monitoring and error tracking

Helps catch downtime, failed imports, server errors, and database backup issues before spend is affected.

Uptime monitor URL, Error tracking DSN, Alert destination
Ready

No app env var yet

Add after the first production deployment path is stable.

Recent sync history

Stubbed integration actions are logged here now; real API syncs can reuse the same history table later.

TimeProviderActionStatusMissing credentialsMessage