A guided tour of koinon¶
Use this walkthrough to configure an organization, add knowledge and check the evidence behind an answer. An administrator manages organization policy and access; an operator connects services and monitors processing; a reader works with the knowledge shared with them.
The screenshots show the built interface with controlled example data. Names, documents, rows and model activity are demonstrations of the interface, not evidence of a production connection or a completed import. Available actions depend on your permissions and the capabilities reported by your deployment. Select a screenshot to open it at full size.
1. Open the right organization and folder¶
Sign in through your organization's identity provider. The organization selector in the top navigation determines which organization's library, conversations and settings you are viewing. Choosing an organization does not grant access to it.
On desktop, the chevron at the edge of the conversation or Settings sidebar hides navigation to make room for your work. Use it again to restore the sidebar. The standalone application remembers that collapsed or expanded preference on this browser; it also applies when you switch between Chat and Settings. On smaller screens, use the navigation drawer and the Settings section selector instead.
koinon presents the product as your corporate brain: a place to find organizational knowledge, ask questions and inspect its sources. The sign-in page uses the installation's configured identity and opens the knowledge available to your account.
Open Library, select a workspace and follow its projects and folders. The breadcrumb shows your current location. Use the column headers to sort, the folder filter to narrow names, More filters for metadata and Per page to change the result size. The page controls request the next server page; they do not download the whole repository.
Folders hold related knowledge. Documents provide passages for reading and search; datasets provide tables for structured queries. The same folder can contain both. See Library for the hierarchy, permissions and supported operations.
2. Check a resource before using it¶
Open a document or dataset to inspect its details. The panel identifies the resource, its metadata and available actions. A dataset can expose its schema, published table snapshots and lineage. Recorded actor names, timestamps and metadata appear when the source records them; not recorded means the platform does not have that historical fact.
Use Versions and lineage to follow the original file, source version, extraction and the specific part or table snapshot used by an answer. Replacing a file must not silently relabel an older answer's evidence.
3. Add files to a deliberate destination¶
Choose Add knowledge, select Upload files and review the destination folder. Use Change if it is not the intended location.
Choose how the files will be used:
- Documents to read and search uses the document ingestion capabilities enabled by the operator.
- Data to explore with queries uses structured dataset ingestion. CSV is one supported case; the actual accepted formats, including spreadsheet support, depend on the connected ingestion service.
Drag files into the drop area or select them from your computer. Review the file list and upload it. A successful upload and a ready knowledge resource are separate states. Follow the source processing status; organization administrators can also open Activity from their avatar menu to inspect processing details. Failed files need review; the interface must not imply that an incomplete file is searchable.
Multiple file selection is not a guarantee of an atomic server batch. Current canonical upload limits and the distinction between client batches and durable bulk jobs are described in File persistence and storage.
4. Configure the services your organization uses¶
An organization administrator opens their avatar menu and chooses Settings. Operators can use the APIs permitted by their current role; the administration pages are reserved for organization administrators. The sections separate organization access, knowledge/AI configuration and operational controls.
This controlled example shows the administrator menu before chat models have been configured. Choose Settings to complete setup. Other roles keep their personal account and integration actions without administrator navigation.
Configure in dependency order:
- Access: establish the intended roles and workspace bounds. Use the separate People and Organization structure sections for positions and reporting relationships. Follow the administration guide for invitations and directory-managed access.
- Providers: connect an approved model provider and validate its observed capabilities. A discovered model name does not prove that streaming, tools or image input work.
- Knowledge models: assign the document and dataset model roles exposed by the server, including embeddings where required. Existing indexed knowledge must retain a compatible embedding space.
- Agents: configure the organization's default chat agent and its authorized knowledge tools. End users do not need to choose an agent in each conversation.
- Knowledge behavior: configure the retrieval or analysis policy supported by the deployment. Read Organization knowledge behavior before enabling RLM; its qualification requirements and limitations are explicit.
- Sources & connections, Storage & indexing, Operations: finish source-specific setup, verify readiness and inspect failed work. Deployment credentials, storage backends and worker capacity belong in the operations documentation.
Settings changes require their own permission. Being an administrator in one workspace does not automatically authorize organization-wide changes.
5. Apply your organization's visual identity¶
Open Settings and select Identity & appearance in the Organization group. The Identity tab edits the product and assistant names, light/dark logos, assistant symbol and browser icon. Drag an image onto the relevant asset or choose a file. The checkerboard helps inspect transparency.
Open Colors to generate both themes from a brand color, then refine individual tokens. The readability checks show the actual contrast for text, secondary text, links and button text. Invalid colors cannot be saved.
The live preview switches between Chat, Navigation and Sign-in. Sign-in deliberately previews the installation identity: an organization's private settings are not exposed before authentication. Changes remain local until Save changes succeeds. See Identity and appearance for deployment defaults, image constraints, restoring inheritance and typed SDK methods.
6. Ask a question, then inspect its evidence¶
Chat opens after sign-in. Use New to start a conversation; chat projects group related private conversations. These groups are separate from the shared folders in Library. The current knowledge scope determines what the conversation can consult. The + menu adds supported private attachments; drag and drop is also available. Wait for attachment processing to finish before sending.
A private chat attachment is not automatically published to the organization library. Knowledge changes and newly derived conclusions require the explicit review and authorization flow described in Agents and chat.
After an answer, open Audit. Check the cited source and its recorded revision, then review the tools and execution context. For structured queries, inspect the executed SQL and the source/database/table snapshot context. For documents, inspect the passage and recorded document-part identity. A source being available now does not by itself establish that its full historical lineage was recorded.
The detailed chat guide explains SSE, conversation memory, file capabilities and RLM tool receipts. Exports and sharing explains reviewing selected messages, retaining their evidence and sharing under the recipient's current permissions.
Review your own activity¶
Choose My activity in the top navigation, or open it from the navigation drawer on a small screen. Select a past reporting window and choose View summary to review the knowledge you created, updated and consulted, your main projects, MCP activity and recorded model usage. Counts distinguish observed, partial and unavailable information.
This view follows the signed-in user and the currently authorized organization. Changing organization clears the old summary before loading the new one. Administrator accounts use the same personal view here; organization-wide reports and processing jobs remain under Activity in the administrator’s avatar menu.
Confirm sign-out¶
Open your avatar menu and choose Sign out. The confirmation dialog lets you cancel before the session changes. Confirming signs you out; saved knowledge and conversations remain. If the identity provider's redirect fails, koinon checks whether the application session has already ended before showing an error.
7. Set your own profile and integration access¶
Open the account menu in the top navigation and choose Your account. Set your display name, avatar, interface locale, time zone and preferred response language. Locale controls presentation; it does not rewrite stored source values.
Choose API tokens for a user-owned integration token with explicit expiry, scopes and resource bounds. Choose Authorized applications to review application access and revoke a connection. These are distinct mechanisms: see Profiles and API tokens, Authorized applications and MCP authentication.
Tokens can upload and maintain knowledge, as well as read it. Choose Create & maintain knowledge for an ingestion integration, then review its destination and permissions. Administration explicitly selects available organization permissions and removes resource limits. Current roles still apply on every request. See API permissions and writes for the role matrix and tested examples in all three SDK languages.
8. Build a headless or embedded integration¶
For a product that supplies its own interface, start with the headless overview, then the complete Python, TypeScript or Java guide. The API and SDK reference maps supported operations and DTOs.
For an existing frontend, use Embedded components. A host supplies an authenticated client and explicit context. Identity and styles stay inside each workbench's component boundary; the host retains control of its own page and authentication.













