Upload background images available to all tenants. JPG, PNG and WebP supported — max 8 MB.

Configure the ERP/BI database connection for each tenant. Credentials are stored in the application database — never in config files.

Tools are loaded from this table at runtime — toggle or edit without redeploying. Disabled tools are hidden from Crystal's function-calling context.

Reusable sandbox Python code recipes that Crystal has built or learned (`run_analysis_code`). Inspect, edit, add, or prune recipes.

Persona sections are assembled in sort_order to build Crystal's system prompt. Changes take effect on the next conversation turn — no restart required.

Maps a customer's descriptive words to the catalogue code stems they refer to — so Crystal resolves "45cc open loop pump" or "orbital motor" into real products instead of dead-ending. Comma-separate multiple stems. Changes take effect on the next conversation — no restart needed.

Crystal proposes behavioral and identity rules after complex interactions or creator conversations. Approve rules to make them permanent; reject to discard; or author/edit one directly.

Every change to what Crystal has learned — persona, self-rules, tool lessons, recipes, pathways, memories, helper rules, standing concerns — whoever made it, with the before and after. Undo any of it, compare any two points, or put her whole brain back to a snapshot or to just before a change. A restore always takes a snapshot first, so it can itself be undone.

How Crystal is learning her own efficient paths. Manual = the operations you give her; Pathways = the efficient routes she distils from experience (a hint, never a script); Trajectories = the raw judged runs behind them.

Companies run by the same people. When a group is on, linked accounts can switch between its companies from their account menu, and every company in it uses the library owner's proposal library (blocks, price book, templates, track record). Proposals, projects and money stay with each company. A group does nothing while it is off — a client gets this only when you switch it on for them.

An outside agent — such as the engineering assistant that builds this platform — connects at /api/mcp with its own token and uses Crystal's own tools, with the authority of the person it acts for, in that person's business. Anything that sends, pays, issues, publishes or needs approval is always refused; settings changes come back as proposals. Every call is logged here. You mint, scope, rotate and revoke the token — the agent never can.

One catch-all mailbox for the whole platform. Each person gets a private Crystal address on this domain (in their profile); mail sent, forwarded or CC'd to it is routed to that person only — never by the From line. Only their own authenticated mail (checked by the stamp this server adds) can ask her to do anything; everything else is kept as information. It never sends.

What Crystal tells people when they ask how do I… or where is…. Each entry is a page or a feature, in the customer's words, with a show me link that opens the page with the exact button highlighted. She only offers entries the person's plan and role can reach. The words are yours to edit; the route and anchor are checked against the pages on every deploy.

Pick a line and who is on it, give her the opening messages, and read exactly what she would say — through her real brain, before anyone real hears it. Nothing leaves: anything that would send, save, book or sign someone up is shown as not actually done, lookups run for real, and the conversation is deleted the moment it finishes. Every run is kept below, with the version it ran on, so you can read before and after a change.

Every model call is priced at the rate below and charged to the business and person it was for. A call no rate matches is shown as unpriced — never as free — and a call made outside anyone's work as unattributed. A price change is a new rate with a later date, so past months keep the price that applied then.

What the platform sells: a plan and a seat count. Personal and Family carry no modules — they get Crystal herself, memory, watch rules and multiple inboxes. Business unlocks the ERP. Blank ceiling = unlimited. Caps write into the quota gate when a tenant is provisioned. Crystal is premium — there is no free plan, so a plan cannot go Live at R 0.00.

A single-use code that lets somebody we know run Crystal for a fixed spell with no card and no auto-renewal. It simply stops at the end — nothing is charged and nothing is deleted. Not for the public: each code works once, and only for the plan it names.

What each module SELLS for on the public signup page (/signup). A module appears publicly only when it is priced and ticked Live — nothing is offered at R0.00 by accident. Base price covers the included seats; extra users are charged per seat above that.

A signup creates an application, never a tenant. Provision creates the tenant, enables the modules they bought (plus everything those depend on), creates their admin login and emails the credentials, and adds them as a billed customer on a monthly profile.