The Athena Guide · 14

For the administrator

Users, engine, sentinel and the System page, programs to install · for whoever runs the server

The first start

At the first start the server terminal shows a 6-digit code: it is needed to create the administrator account. Once the code is typed, the page also asks where Athena can work: the folder her tools (files, commands, projects) stay inside. There are suggestions (home, Documents, folders containing projects); if you leave it empty it is the home of whoever started Athena. Afterwards it can only be changed on the server: with the ATHENA_WORKSPACE_ROOT variable, which always takes precedence, or with the area.json file in the data folder. At every start the terminal says which area is in use.

Users

In Settings → Users you create accounts, assign roles, reset passwords and grant the console (files and commands) user by user. Deleting an account deletes its data.

The engine

In Settings → AI Engine: the engine address (OpenAI-compatible), the model, the API key (stored encrypted) and the certificate if it uses https. /model changes the model for everyone. The internet search uses a SearXNG set here.

Enter a bare address such as http://server:30007 or a complete one such as http://server:30007/v1: Athena adds /v1 only to addresses without a path. Explicit provider paths, such as https://api.openai.com/v1 or a custom gateway, stay as entered. The same rule applies at startup with ATHENA_ENGINE_URL and in Settings.

System and sentinel

The System page shows the state of the engine's machine (GPU, memory, services), read from its sentinel: address and token are entered in Settings → AI Engine.

Also in Settings → AI Engine there is the Request log, to investigate a problem together with the engine team: it saves the exact text of the last 50 chat requests to the engine, without the key. They contain conversations and memory, so keep it on only when needed: it turns itself off after 24 hours, and turning it off deletes the files.

The Models tab lists every model configured in the engine, grouped by job: conversation, library, voice, transcription, video. It shows which are in memory and how large they are. A new model added to the engine appears by itself. Use this switches the chat model for everyone: answers in progress finish, new ones wait for the loading, and a notice appears in the chats. From here you can also stop and start the engine, and see what is using its memory.

Programs to install

In Settings → Tools, Athena lists installable programs such as CadQuery, with an official source, verified version and checksums. Each program uses its own folder without changing existing installations on the PC.

Personal MCP servers are configured separately in the same panel. REA, for example, can be connected as an already installed MCP server with a local skill. It is not part of the standard catalog, is not installed automatically and requires no special flags or activation passwords.

HTTPS and installation on devices

For installation as an app from Chrome on Android, the documented route is Tailscale Serve. Install Tailscale on the server PC and accessing devices, with appropriate access permissions in the Tailscale network. Anyone downloading Athena can set up their own network; the developer’s domain or network is not required.

With Athena running in its default HTTPS configuration on port 8080, run on the server PC:

tailscale serve --bg https+insecure://localhost:8080

If you already use Serve for other services, check tailscale serve status first to avoid replacing them. Follow the link Tailscale provides to enable MagicDNS and HTTPS certificates when requested. Use Serve, which limits access to the Tailscale network; Funnel makes the service public on the internet.

The command shows an address such as https://pc-name.network-name.ts.net: give users that address, without :8080. Tailscale Serve exposes HTTPS on port 443 and forwards requests to local port 8080. https+insecure applies only to the connection to the local server’s self-signed certificate; the phone receives Tailscale’s valid public certificate for the full .ts.net name. No phone certificate import is needed. Serve manages certificates and, with --bg, resumes sharing after a restart.

Check that Chrome reports Connection is secure, then follow Install Athena on your phone. Tailscale and Wi-Fi IP addresses are not covered by the .ts.net certificate. The installed app stays linked to the chosen address; switching addresses may require signing in again.

Official documentation: Tailscale Serve and serve command.

The server

Athena's server restarts by itself after a reboot or an error. Its log is server.log, in Athena's data folder.