Welcome back, admin
A live snapshot of 18AI activity. Pick anything from the sidebar to drill in — or keep an eye on the metrics below.
| Name | Credits | Balance | Notif | Status | Joined |
|---|
| When | User | Feature | Model | Output | Credits | Status |
|---|
| When | User | Source | Title | Size | Duration |
|---|
| Name | Price | Credits | $/credit | Status | Sort |
|---|
| Name | Package | Bonus | Window / Delay | Target | Notify | Status |
|---|
Send a new notification
Recent broadcasts
(targeted system notifications are hidden — they're noisy)| When | Title | Body | Kind |
|---|
| When | User | Package | Provider | Amount | Status |
|---|
Tick the categories you want exposed in the app. Users only see services in checked categories — pick one big bucket per platform (Instagram / TikTok / YouTube) to keep the picker clean.
Payment notifications
Get notified the moment a user tops up. Set the admin email — the user account with that email receives the push and the in-app banner.
SMM panel · Buy followers / likes
Powers the in-app "Buy followers / likes" feature. The key here wins over the .env value at runtime so you can rotate without a deploy. Markup is added on top of smmmain's panel rate before users see it. Curate categories from the SMM tab.
Telegram · Advanced
Channels every linked user gets silently joined to after they link
their Telegram account on the app, and again each time they open the
app (so adding a channel here back-fills previously-linked users).
One per line. Accepts @username, t.me/username,
or invite links like t.me/+abcdef.
SMTP · Outgoing email
Used for password-reset codes and admin notifications. For Gmail, use an app password (Google Account → Security → App passwords). Port 587 with STARTTLS (secure = off) is the standard combo.
Social login · OAuth providers
Credentials for the social login buttons on the login screen. Toggle Enabled off to hide a provider from the client without deleting its config. Secrets are blank-preserving: leave the field empty when saving to keep the existing value.
Web OAuth Client ID is used as the audience for the ID token. The Android client ID is needed by the Flutter google_sign_in package.
Discord
Standard authorization-code flow. Add the redirect URI to your app
at discord.com/developers; it should point to a
deep-link your app can intercept (e.g. app18ai://oauth/discord).
Telegram
Bot token from BotFather. Bot username is shown to the user in the Telegram Login Widget URL. Token is verified server-side, never sent to the client.