C

ConTools v3.131.42

Account automation console

Monitoring

Log
Report
Network
Automation Log
Ready.
URL Log

GitHub Configuration

What runs after the account exists
Uncheck a task to skip it — uncheck all three and the run is a bare signup. The switches apply to the next run; nothing already running is affected.
post-signup work · 0 of 3 tasks
A run with PAT off finishes with no token stored, so nothing that needs one (CodeBuddy attach, the API) can use the account afterwards. 2FA off leaves the account on password-only, which GitHub flags far more often.
Rented inbox
On: a rented Gmail GitHub already knows is rotated once (john@ → j.ohn@) and the run continues — Gmail delivers the code to the same inbox. Off: the run stops and asks for a fresh inbox, keeping one account per rental.
After a refusal, the row is parked before its next launch. The retry uses a fresh profile and a new exit; other connections keep running meanwhile.

Tuta Configuration

The approval mail Tuta asks for when a new account is under review
Why this person needs a mailbox: business, job search, HR, freelance, or a small association. Each has its own German and English wording — one template repeated over a batch is the same tell as one handle shape repeated over a batch.
When a new account lands behind the review modal, press Email us to fast-track, replace Tuta's template with the generated request, and send it. Unchecked leaves the draft in place for a human.

Proton Configuration

What runs after the account exists
Uncheck a section to skip it — uncheck both and the run is a bare signup. Disabled tasks inside the recovery wizard are advanced with Later where Proton requires it; the final badge reports the actual result.
recovery wizard · 0 of 8 tasks · feeds the 10-point score below
Password reset options
Data recovery options
Advanced recovery options
Not scored
Always on, no task needed (Proton enables these on every new account): Device data backup (once a reset option is verified), Signed-in reset, QR code sign-in — so a bare signup reads 3/10 and a verified address takes it to 5/10.
runs first, right after signup · 0 of 2 tasks · not part of the 10-point score

Manage Proton Accounts

0 account(s) selected
Check Account Status
Asks Proton about every selected mailbox from its own sticky session and writes the verdict to proton_accounts.status — that column is otherwise the signup verdict, written once and never revisited, so a mailbox that died afterwards used to keep reading success until a later run failed reading a code out of it. Two doors, in this order: Proton's credential-free availability check (no session, no password) says whether the name still has a mailbox behind it — a name Proton calls free is written as missing; then the login itself, where suspended (10003) is the one verdict only a credential exchange can reach, and a mailbox that answers normally is re-affirmed as success. A probe that reached no answer is reported as unverified and its row is left alone: a network blip must not rewrite the table, and rate-limited names the exit (Proton throttles per IP), not the mailbox.
Sync Account Sessions
Re-authorises each selected mailbox from its own sticky session and stores the fresh pair the code readers live on (session_uid + session_refresh_token). This is the bulk form of a row-level session refresh — the Proton half of the GitHub manager's Sync Profiles — for when re-entering 600 mailboxes one by one is not an option. A stored session Proton refuses is rebuilt from the password rather than reported as a failure: the mailbox is fine, the token was old. It does not write status — "can this mailbox be re-entered?" is a different question from "is this mailbox healthy?", and that one is Check Status's answer.

Proton Recovery Detail

Tuta account

Generate iCloud Addresses

Custom-domain addresses need Allow All Incoming Messages: ON on the domain — mail to any name is forwarded to the account's main address, exactly like HME.

Credits & Usage

Loading...

Live view

live view of this run's browser

Request Detail

Proxy Pool

Countries stamped on the ticked rows when you Dispatch Selected — same catalog and defaults as the Run modal.
2 selected

Import GSuite Accounts

Default: now / +24h. Applies to all imported accounts.

Shop stock state

Marking for Shop never changes a sold row — that is what keeps a bulk mark over a mixed selection from silently re-listing something already sold.

Delivered text

This is what the buyer was sent. Resend sends the same text again and takes no second account.

GoPay login

Test gateway

One real bill: pay it with any QRIS app and the shop sees it.
The amount is the QR's own price, in rupiah, and it is the number the shop matches the payment against — so pay it exactly, without rounding.

Add product

The family a buyer recognises. Price lives on its variants.

What it is

Button preview: Product
The slug follows the name until you type one of your own. The icon is what a buyer sees on this family's button — leave it empty for none.

Where its stock comes from

Stock is measured over this table's Shop rows; nothing here creates any. A tool ignores those rows and performs its action with this table's accounts.

Add variant

One priced SKU inside a family.

What it is

The slug follows the label until you type one of your own.
Ditampilkan di halaman produk Telegram sebelum pembeli memilih varian. Jangan masukkan kredensial, link pembayaran, atau klaim yang belum bisa dipenuhi.

Price

= Rp0
= no sale

Wholesale (per unit)

A cheaper unit price from a quantity up. The buyer is charged the cheapest tier their quantity reaches; an event's percent still applies on top. Leave empty for no wholesale.

Which stock rows qualify

The rows you assign with Mark Variant are this variant's stock, whatever their live credits say. Use it for a fixed SKU where an old account at 100 credits still belongs. The window below is then not used at all.
Age is the account's own creation date (GitHub's, not the day we added the row). A row with no creation date on file never matches an age window — it stays in stock rather than selling at the wrong price.
The derived variables work here too: refresh_token keeps rows whose stored token has no refresh token out of stock.

What the buyer receives

Blank prints the source table's own fields, in its own order. A derived variable prints something the column only implies: email_local is the address without its domain, refresh_token is the token inside the stored access_token JSON.

Add event

A percent off while the window runs, and an optional cap per buyer.
Applies to
Pick nothing and the percent comes off every product in the shop.
A cap of zero means the event is a pure discount. The limit counts live orders, so cancelled and expired ones free a seat.

Mark from list

Generate & Run — disposable email

1Provider
2Domains
3Proxy Pool
Loading…
One GitHub account per address.

Queue target

none selected
Delivery
One row = one country — the run modal's pool spreads over the rows of a batch, so only its first slot can ever reach a single-row action like this one. Pick the exit for this row, and where a successful run should be delivered: Not routed leaves it on the table, AI Gateway attaches it, Shop marks it for sale.

Rent provider

A mailbox a buyer can rent. One Telegram ID per rental, one resend, a 20-minute window.

Worker machines —

Every machine that can run a queue: state, capacity and free space. Click a row for its detail.
Loading the fleet…

Worker machine —

Spec, live vitals, last cleanup and the fleet it belongs to
Loading machine…

User Management

Manage operator accounts, credits & worker machines
Loading users…

Add User

Configuration

General Settings
1–10. Applies to every flow, including GitHub signup.
Browser Engine

Which engine carries a run. The choice is exclusive: Clawbrowser rides the managed proxy and is never handed your custom proxy; Camoufox and Nextbrowser ride your custom proxy and never read or spend a pool key. Nothing selected keeps the automatic order — a working custom proxy, else the key pool.

Nextbrowser Account Token
Used by the Nextbrowser (NB) engine only. It is a paired NextBrowser account token (nb_live_…), not a Clawbrowser API key, and it is stored encrypted. A run on NB is skipped without it — this engine never borrows a pool key.
Pair a NextBrowser account
Opens NextBrowser's own sign-in, then stores the key it returns. Nothing is written until the pairing completes, so an abandoned sign-in leaves the stored token untouched. The link expires after about 14 minutes.
Live Browser View

Show a running browser in the Running tab's Live column, watched in place. Every engine captures its own browser — a CDP screencast where the engine speaks CDP, a framebuffer grab of the run's own display where it does not — and the machine running it sends the frames to this console. Nothing is exposed to the network, and it costs CPU only on the machine that claimed the run, and only while somebody is actually watching.

Proxy Exit Ranking

How the pool chooses between the exits it just measured. On keeps the shipped behaviour: the fastest exit wins. Off puts freshness first — an address another run just left through can never outrank a fresh one, and latency only breaks ties between exits that are equally fresh.

Latency is stable, so "fastest" tends to be the same address every run in a window — and five labels can all resolve to one IP, which the pool logs as "best-of-N is ranking measurement noise here, not exits". Both are ways the same exit gets handed out repeatedly. Turn this off when accounts are being refused or reviewed, because exit reputation is the thing Tuta acts on.

GitHub Guardrails

Limits for the public actions — star, fork and follow. The 09-17 wave suspended every account younger than the signup change after 1038 accounts starred one repo in half an hour, so: an age gate, a per-repo daily cap enforced across runs, and a per-account sampled/shuffled target list. 0 turns a limit off.

iCloud Accounts

HME source — cookie + IMAP to fetch Hide-My-Email
Loading iCloud accounts…

Add iCloud Account

Add 9router Instance

Edit iCloud

Edit 9router

Add SMS Provider

Status is set automatically once the API key connection is verified.

Edit SMS Provider

Status is set automatically from the API key connection check.

Add AliasMail Parents

Pick that many random HME/custom-domain addresses with an active iCloud owner and no AliasMail parent yet. Nothing is queued until you select rows and press Run.

Add JIO Number

Ten digits, starting 6–9. A leading +91 or 0 is stripped for you.

Edit JIO Number

Paste the JIO code

The run is waiting for this. A code Jio rejects leaves the number requested, so you can paste the next one.

Add Email Provider

ERB declares GitHub only, but its order endpoint takes any website. Type a key and the site's domain (e.g. proton → proton.me) to rent inboxes for it and offer it as a target in the Run wizard.
Status is set automatically once the API key connection is verified. A platform list is the supplier's own: it is what a rented email may later be used for.

Edit Email Provider

Status is set automatically from the API key connection check.

Price list

Rent an email

Reading the supplier's price list…

Rent history

Cloudflare accounts

Add Cloudflare account

Both secrets are encrypted at rest. Status is set by a live check — never at insert time.

Edit Cloudflare account

A new credential is checked the moment it is saved.

Add domain

Email Routing is enabled on the zone and the subdomain(s) are added to the pool — Cloudflare writes their MX/SPF/DKIM itself.

Subdomain pool

Minted addresses

Mint an address

A full pool refuses with the arithmetic (subdomains × cap) rather than overfilling one subdomain.

Run — WorkBuddy re-auth

The invitation's +100 is paid on the account's first query (§248). Ticking this registers and stops without spending that query, so the attribution can be made later — use it when the account is meant to be bound to a parent afterwards, or when you want the signup only.

Run — Domains (mint addresses)

Egress comes from the global proxy pool (Configuration → Proxies → Proxy Pool).
Every address gets its own literal Cloudflare rule pointing at the relay Worker, and its own queue row naming that address — so the run claims the one minted for it.

Email Scheduler

Renting spends this key's balance — the key must already be checked (active).
Automatic rent: cap-sized orders per cycle, then wait the interval.

Run from Source

1 Target
2 Proxy Pool
3 Review
Loading…

Manage CodeBuddy Accounts

0 account(s) selected
Cron Schedule CRON ACTIVE
Runs once a day for every valid, non-banned account — one real conversation per account. Next run: calculating…
Egress comes from the global proxy pool (Configuration → Proxies → Proxy Pool) — one account per run, scope any. There is no per-schedule proxy field any more.
Run Now
Takes the turn on the WorkBuddy online surface, falling back to the IDE gateway. A run only counts as success when the conversation actually happened.
0
Success
0
Failed
0
Banned
+0
Credits
Idle
Parent Account NOT SET
Every new CodeBuddy account binds this parent's referral code right after its token is minted. The gateway only accepts a bind within 12 hours of registration, so it happens during signup — the same code applied to an older account is refused. Leave empty to skip.
Empty = new accounts are not bound to anyone.
Live Log

Manage Qoder Accounts

0 account(s) selected
Probe Plan & Credits
Exchanges each account's stored PAT for a jobToken and reads its plan, credits and login username back — the bulk form of the row's refresh button, and the same reader underneath, so a row and this modal cannot disagree. A PAT cannot read status directly (Bearer <PAT> → 401), which is why this is an exchange and not a GET. Refreshes plan, credits, credits_total, username and status.
Provision Trial
The mock qodercli activation, for an account that came back without its trial: exchange the PAT with a spoofed Cosy-Machine* identity → read the campaign platform → claim what the legacy activity route still offers → fire one cheap model call → poll for the async 300-credit grant. Not granted is not a failure — the grant is server-side and asynchronous, so a pending account stays success with the reason recorded in error.
One account per worker, all in parallel — raising this does not multiply the run's duration by the account count.
Claim Campaign Rewards
The daily-credit event (qoder.com/events/100credits) is claimed from the desktop growth page, not from a signup: reads the campaign platform with the desktop app's identity and posts one claim per reward the account is entitled to. Rewards land in the add-on block, which is why the credit cell shows them separately from the plan quota. Nothing claimable is not a failure — a day with no reward comes back ok with an empty list, and a repeat claim is replayed server-side. The daily sweep runs the same call, so pressing this and the cron cannot disagree.
Parent Referral Code
Signups started from this install open the parent's invite link first and carry the code through both SSO legs (the plain Qoder SSO and the GitHub SSO), so the new account is bound to the parent that referred it. Paste either the bare code or the whole link — the code is extracted and normalised either way. Leave empty to sign up un-referred; already-created accounts are not re-bound. Binding is free, and an invited friend is worth the same 2-week Pro Trial + 300 credits as any other signup — the parent is paid only after that friend makes a first payment (1,000 credits, landing 14 days after the subscription), and no amount of chat can influence a purchase.

Manage WorkBuddy Accounts

Check status, proxy and the daily sweep
Check account status
One free check per account, straight to WorkBuddy's own API — no browser. An account the product has restricted is marked with a ban badge beside its status. The check creates a conversation and costs no model call, so a full sweep is free.
Selected accounts, or every account with a token when nothing is selected.
Restricted rows get a ban badge in the WorkBuddy table.

WorkBuddy Configuration

Fleet-wide growth and referral settings
Login mode
How a WorkBuddy run authenticates. Web drives the browser handshake. HTTPS runs the same chain as pure HTTPS calls — no browser at all — on the run's own egress. Re-auth runs become fully browserless; fresh signups still open a browser for the GitHub identity, then take the WorkBuddy leg over HTTPS.
The whole chain runs as plain HTTPS calls on the run's own egress — GitHub login, the broker hop and the token mint, no browser at all.
Real X-Device-Token values only — a restricted capture's token carries that machine's score. Write-only: the stored pool is never shown back, and a blank field keeps it.
Growth activities
Which steps a signup run takes after the account is created. Each is a separate credit-earning action — untick to skip it.
Referral chain
When on, every new WorkBuddy account is bound to a parent code over HTTPS after registration. When off, accounts are created without a parent — the referral chain is paused.
Enable referral chain
Reading…

WorkBuddy Activity

Current bonus, campaign, or event
Loading…

CodeBuddy CN — Daily Checkin Cron

Automated daily checkin (+100) & growth tasks for ALL active accounts
CRON ACTIVE Next run: calculating...
Scope: ALL valid non-banned
Egress comes from the global proxy pool (Configuration → Proxies → Proxy Pool). For GLM the pool account must exit in Hong Kong — that is a provider-parameter choice (-cc-HK), not a field here.
Execution Status Idle
0
Success
0
Failed
0
Banned
+0
Earned

Edit TXT Export Format

Configure fields, separator, and line format template
Available Variables
Click any variable chip to insert at cursor position:
Quick Separators (Pemisah)
Click separator to insert at cursor position:
: (colon) | (pipe) , (comma) ; (semicolon) --- (dash) - (hyphen) TAB SPACE

Edit JSON Export Template

Configure JSON template or leave empty for standard array
Available Variables
Click variable chip to insert at cursor position:
Quick Separators & Symbols
: , " { } [ ]

Edit Delivery & Routing

Select target destination: specific 9router instance, shop, or all
Attach account to all active 9router instances (one by one), or select a specific instance.

Edit GitHub Credentials

Only the boxes you change are written. Emptying one clears that credential; a box left as it was shown (a masked secret stays masked) is kept as it is. Email is the row's identity and cannot change here.

Add GitHub Account

An address the table already holds is topped up: only the fields you fill in are written, so cookies, profile and created date stay. “Check Status” verifies the account against GitHub, which needs a username or a token to ask with.

Manage GitHub Accounts

0 account(s) selected
Check Account Status
Detects active / flagged (shadowbanned) / suspended from the public profile plus each account's PAT, then writes the verdict to github_accounts.status. The PAT call also reports two_factor_authentication — accounts with 2FA on but no stored TOTP secret are flagged (see the 2FA filter on the GitHub tab), because they cannot answer a login prompt. It also refreshes each account's GitHub fields — created_at and the cached profile — from the same two responses, at no extra request.
Sync Account Profiles
One api.github.com/users/{username} per account from that account's own session — the bulk form of the Refresh Account button inside every row, for when clicking 600 of them is not an option. Re-writes profile_data (bio, followers, repos, avatar) and created_at, the age the star/fork guardrails measure. Does not re-test the token: use Check Status for suspended / flagged.
Star Target Repository
One PUT /user/starred per account using its stored PAT. Accepts owner/repo slugs or full repository URLs — one per line, and every account stars every repo from its own session. Max 25 repos per run.
Fork Target Repository
One POST /repos/{owner}/{repo}/forks per account using its stored PAT, landing the fork in the account's own namespace (username/repo). A repo an account already forked comes back as that existing fork, so a re-run is safe rather than a 422. Same list rules as Star: one repo per line, max 25 per run.
Follow Target User
One PUT /user/following per account using its stored PAT. Accepts a plain username or the profile URL.
Create Profile Repository
Creates username/username with an AI-written README and patches the profile bio. Heaviest action — about 5 requests per account.
Random Cross-Follow Pool
Background worker with anti-ban pacing (0.4–1s jitter). Each account follows N random accounts from the pool.
Follows per account
Update Profile Avatar
Queues accounts into the worker pool to sign in via browser and upload a random avatar from the gallery. Accounts that already have a custom avatar are skipped.

2FA Authenticator & OTP

Live TOTP verification code & backup recovery
Current 6-Digit Code
------
Refreshes in --s
2FA Secret Key
None
Backup Recovery Codes (0) View / Copy

Generate Outlook Accounts

Creates the credentials only — nothing is launched. Each row is a mailbox name with no domain: the domain is reserved at signup by Microsoft's own form select (outlook.com, hotmail.com, or the region's own — outlook.sg for an SG run), and the row adopts the address the form built once a signup succeeds. Tick the rows in the table and press Run → Outlook Signup to create them at Microsoft; that wizard is where the country and the delivery are chosen.

Generate mail.com Personas

Creates credentials only; it does not claim a mail.com address or launch a browser. Select one row and use Research, then start its Playground session for CDP mapping. Signup automation follows only after the page's selectors and success verdict are verified.

Generate Tuta Accounts

tuta.com is deliberately absent: it needs a Pro plan, so a Free signup that picks it is refused.
Egress comes from the global proxy pool. Each queued row takes one country, round-robin.
The flow ticks Tuta's two attestations for you — "I do not own any other Free Tuta account and I will not use this account for business" and "I have read and agree to the terms". Pressing Generate is you making those statements.

Add Hushmail Parent

The code authorises the page on its own — no parent login, no session. One parent mints many children, and a rotated code is a new parent row.

Generate Hushmail Children

The submit outcome is unmeasured. The form's fields and the button are measured, but nobody has seen what a successful submit returns — so a run that fills the form and leaves the page lands as submitted, never as success. The cap is 10 per press because the parent's rate limit has not been measured either.

Hushmail verdict

Generate Proton Accounts

Each queued row takes one of these, round-robin. The country is the gateway's exit selector (-cc-XX) — a generated signup has no outside address, so this is the only place its egress is chosen.
Egress comes from the global proxy pool (Configuration → Proxies → Proxy Pool). A generated signup has no outside address, so the pool is the only place its exit is chosen — there is no per-run proxy field any more.

Each account gets a fresh username and password, and its signup is queued the moment it is minted — the first runs start while the press continues. These runs carry no outside address, so human verification is passed by solving the CAPTCHA (slide-to-fit) puzzle; the recovery email is drawn at random from the iCloud pool — Hide-My-Email and custom domain addresses alike. Progress is on the Running tab.

Scheduler

1 Target
2 Accounts
3 Proxy Pool
4 Timing

iCloud Account Required

Scheduler requires at least 1 active iCloud account to generate HME addresses. Please configure an account first.

Shop activity

How it is running

Reading the shop…

Recent order events

Reading the shop…

How the shop goes live

  1. Paste the BotFather token in the Settings tab, save it, then press Test connection.
  2. List what is for sale from an account tab's Action menu → Manage products… — a family points at that tab's table and sells the rows Shop already routed. The catalogue is not managed from here.
  3. Open the Payments tab to set up a channel, or stay on manual and confirm each payment yourself.
  4. Tick Run the bot. The poller starts on the next deploy.

Payments

gopay and dana are served by one HTTP contract; shopeepay documents its own, so it is refused rather than half-served (§8.2). Each channel has its own sub-tab in Payments — DANA is hidden while its session is retired (§284). The gateway's URL and key are built into this integration, a channel's own switch makes it active, and Manual is the fallback when a QRIS channel cannot take the order.

A merchant session that has died answers exactly like a shop nobody has paid yet, so every verdict here is shown with the moment it was taken. An old green light is the one thing to distrust.

Filters

Orders
Status
Product
Created

Stock notifications

On means this buyer receives an alert for that product. A product they never touched counts as on.

Loading…

Filters

Customers
Blocked
Last seen
Providers
Provider Host Session TTL
No providers yet.
Add provider
Known integrations fill in the documented proxy parameters.
Every connection of this provider dials this host.
Session, region and TTL are the parameter names the provider documents — one calls its session sid, another ssd. Leave a name empty if the provider has no such parameter.
Edit connection
This user's WaroengProxy key, used only for this connection's account and usage reads.