Mesh Storage
Manage
Fleet operations — API keys and dashboard signals
Day-to-day fleet operations after a device is connected:
- API key rotation — issue, roll, and revoke device API keys without re-provisioning.
- Dashboard signals — see device status, last contact, and upload activity.
API key rotation
Every device gets its own API key on approval. You can rotate it from Mesh Storage without re-provisioning or connecting to the device over SSH.
A rotation may be needed when a device is decommissioned, a key may have been exposed, or your security policy requires periodic credential rotation.
How key rotation works
Key rotation is designed to avoid upload downtime:
- Open Mesh Storage → Devices, select the device, and click Roll key. The old key remains valid.
- On its next sync, the device receives and persists a new key.
- Alloy revokes the old key after the device confirms the replacement.
To stop a pending roll before the device syncs, click Cancel key roll.
Dashboard signals
Mesh Storage → Devices shows fleet status at a glance:
| Column | What it tells you |
|---|---|
| Device | Device ID (or edge ID if none) and edge ID |
| Info | Hostname and device ID |
| Status | Pending, Approved, Archived, or Observed |
| Last seen | When the device last contacted Alloy |
| Last upload | When the device last uploaded a file |
| Files / Size | Total files uploaded and their cumulative size |
| Activity | Active (last contact or upload within 24 hours), Quiet (within 7 days), Stale (older), or No signal |