Back to Self-Hosting
Third-Party Tools
Every external tool shipped with the OpenPay stack — how to access it, the credentials to use, and where the official docs live. Tools that involve the app itself link to an in-depth guide below.
The Tool Matrix
| Tool | Access | Purpose | Guide |
|---|---|---|---|
| Grafana | http://localhost:3000 | Metrics dashboards (Prometheus data + log explorer via Loki) | In-app guide → |
| Prometheus | http://localhost:9090 | Metrics scraper & time-series store (feeds Grafana) | In-app guide → |
| Loki | http://localhost:3100 | Log aggregation store (feeds Grafana log explorer) | In-app guide → |
| Hyperswitch Control Center | http://localhost:9000 | Payment orchestration dashboard (merchants, API keys, connectors) | In-app guide → |
| Hyperswitch Router | http://localhost:8081 | Payment processing API (backend of the dashboard) | Official docs ↗ |
| Kill Bill | http://localhost:8082 | Subscription billing & invoicing | Official docs ↗ |
| Tazama Rule Studio | http://localhost:3002 | Fraud detection rule editor (visual) | Official docs ↗ |
| Case Management | http://localhost:3001 | Fraud case review dashboard | Official docs ↗ |
| NATS Monitoring | http://localhost:8222 | JetStream event bus monitoring (subjects, streams, consumers) | Official docs ↗ |
| Traefik | http://localhost:8080 | Reverse proxy & TLS (dashboard API when enabled) | Official docs ↗ |
Credentials You Need to Edit
Most tools ship with development defaults. Change these before exposing anything publicly:
| Tool | Default credentials | Where to change |
|---|---|---|
| Grafana | admin / GRAFANA_ADMIN_PASSWORD (root .env, default: admin) | Root .env / service .env |
| Prometheus | No login (browser UI) | Root .env / service .env |
| Loki | No login (API only) | Root .env / service .env |
| Hyperswitch Control Center | First user to sign up becomes the org admin. API key: HYPERSWITCH_ADMIN_API_KEY | Root .env / service .env |
| Hyperswitch Router | API key: HYPERSWITCH_ADMIN_API_KEY (header: api-key) | Root .env / service .env |
| Kill Bill | admin / password (change in Kill Bill .env) | Root .env / service .env |
| Tazama Rule Studio | Tazama Auth .env (default dev credentials) | Root .env / service .env |
| Case Management | Tazama Auth .env (default dev credentials) | Root .env / service .env |
| NATS Monitoring | No login (browser UI) | Root .env / service .env |
| Traefik | TRAEFIK_DASHBOARD=true (root .env) | Root .env / service .env |
Hyperswitch Control Center has no preset password: the first person to sign up at http://localhost:9000 becomes the organization admin. For team invites and email-based onboarding, see the Email Delivery & Team Invites guide.
The General Rule
- If the tool involves this app (Grafana dashboards over our metrics, email delivery for Hyperswitch auth), we provide a step-by-step guide in the left sidebar.
- If it doesn't (generic features of Traefik, NATS internals, Kill Bill plugin development), use the official docs — each tool links them above.
start the monitoring stack
# Grafana, Prometheus, Loki & Promtail
docker compose --profile monitoring up -d
# URLs after startup
# Grafana: http://localhost:3000 (admin / admin, or GRAFANA_ADMIN_PASSWORD)
# Prometheus: http://localhost:9090
# Loki API: http://localhost:3100