ZKas balance dashboard

A small, read-only gateway for locally authorised ZKas watch-only wallets.

The UI lists each wallet address known to the local wallet daemon. Selecting an address loads only that wallet's balance, sync state, and transaction history. The browser never receives a wallet API token, viewing key, seed, mnemonic, or filesystem path.

Multiple monitoring addresses

The dashboard discovers every locally authorised watch-only wallet and shows its public address in a selector. Each selector link uses a short hash of the public address, never a wallet API token or filesystem path. Selecting an address fetches the balance and history only for that wallet; unknown or malformed selections are rejected.

Run

The process is intended to run on the same host as zkas-walletd and bind only to loopback. Put TLS and user authentication in a reverse proxy in front of it.

ZKAS_WALLET_DIR=/var/lib/zkas/wallets \
ZKAS_WALLETD_URL=http://127.0.0.1:8501 \
ZKAS_DASHBOARD_LISTEN=127.0.0.1 \
ZKAS_DASHBOARD_PORT=8601 \
python3 app.py

The daemon discovers wallet metadata files locally. Their filenames are API tokens, so the wallet directory must be readable only by the dashboard service account. Address selection uses a short hash of a public address, not the token.

Tests

python3 -m unittest discover -s tests -v

Security model

• This is a read-only dashboard. It never creates, imports, signs with, or spends from a wallet.
• Treat a full viewing key as sensitive monitoring material. Do not commit it or send it to the browser.
• Run the service behind authentication and TLS. Do not bind it publicly unless a separate, reviewed access-control layer is in place.

Licensed under the MIT License.