Case 11 · Application

Every client site.
One screen.

The interfaces agencies live in: the JOVION Agency Hub, a read-only dashboard for a whole fleet of client sites with scheduled audits and digests — and the Command Center, the agent’s live console inside wp-admin.

Application Interface — brand mark
01 // Role
Application design · Engineering
02 // Product
JOVION Agency — WordPress plugin
03 // Fleet
Up to 100 connected sites
04 // Status
Shipping in JOVION Agency

A The brief

An agency with forty client sites spends its mornings logging in to each one to see what needs updating. Nobody can see the whole fleet at once, and nobody wants to hand a dashboard the keys to every client’s admin.

A.2 What it had to do

  1. 01The whole fleet’s health in one table
  2. 02Connect a site without sharing an admin password
  3. 03Audits that run on their own and report back
  4. 04A console for the agent that shows its work as it happens

B · Agency Hub

The fleet, at a glance.

Seven client sites, the Hub’s own columns and filters. Run an audit and watch every site re-checked in turn — one site down never stops the rest — then read the digest it sends.

JOVION // AGENCY HUB
SiteCorePluginsThemesPHPHTTPSChecked
northside-dental.example6.8.33 updatescurrent8.3yes2 h ago
harbour-bakery.example6.8.3currentcurrent8.2yes2 h ago
kline-law.example6.7.25 updates1 update8.1yes2 h ago
studio-oak.example6.8.31 updatescurrent8.3yes2 h ago
riverside-yoga.example—————unreachable
mapleworks.example6.8.3currentcurrent8.4yes2 h ago
east-end-auto.example6.6.22 updates1 update7.4no2 h ago

7 of up to 100 sites · read-only, paired by one-time code

Digest email · Telegram

JOVION fleet audit — waiting for the next run

Audits run daily or weekly, or on demand.

The last 50 runs are kept, each with its per-site timings.

C · Capabilities

What it does.

01Paired, not shared
A client site issues a one-time pairing code. The Hub stores it encrypted; the client keeps only a hash and can revoke it instantly.
02Read-only by design
The Hub can ask a site for its status and nothing else — no write access, no admin login.
03The fleet table
Core, plugins, themes, PHP, HTTPS and when each site was last checked — refreshed per site or all at once.
04Fleet filters
Needs updates, unreachable, PHP end-of-life, not HTTPS — the same filters the agent can query from chat or an MCP client.
05Scheduled audits
Daily or weekly, or on demand. Each run keeps per-site timings, and the last fifty runs stay on record.
06Digests where you are
“JOVION fleet audit — 4 of 7 need updates”, by email or to your own Telegram bot.
07Command Center
A resizable console in wp-admin: live activity stream, system status, ability modules and site vitals beside the chat.
08Voice and images
Talk to the agent and hear it answer; paste a screenshot straight into the conversation.

D · Engineering

How it’s built.

  1. 01

    Streaming, with a fallback

    Chat replies stream from the server as they’re written, and quietly fall back to a single response if streaming is blocked.

  2. 02

    Light on the admin

    The console is plain JavaScript — no framework to load on every admin page — and remembers its size and position.

  3. 03

    Nothing secret in the log

    Every tool run is recorded, with arguments redacted before they are written. Plugin and theme switches can be undone in one click.

  4. 04

    Brute force, bounded

    Pairing tokens are compared in constant time, and failed attempts are capped per address.

Stack

  • PHP 8
  • WordPress
  • Vanilla JS
  • Server-sent events
  • WP-Cron
  • AES-256-GCM
  • MCP

Brand system

  • Copper#CA8459
  • Bright copper#FABA8E
  • Canvas#030303
  • Ink#EDE8E3

E · Impact

By the numbers.

100
Client sites per Hub
5
Fleet filters
50
Audit runs kept on record
0
Admin passwords shared with the Hub

Have something ambitious in mind?

Tell us what you’re creating — we reply within two business days.

↯ Quick contact

Just a quick question?

Ask anything — we reply within two business days.