Review workspace
Review what colleagues share, and keep owners and access up to date.
Admin access required
Sign in with an account assigned to the hub admin group.
Submission inbox
Filter the queue, inspect the submitted content, then approve or reject from the same card.
No submissions
Nothing to review for this status.
Feedback queue
Open feedback to read the full message and screenshots. Feedback is retained for 90 days.
Feedback has not been loaded.
No feedback
Nothing matches this status.
Agent reviews
Manually review a visible catalog agent. This does not enable review reminders.
Review due
Published items whose configured review date has passed.
Featured on Discover
Choose up to 8 published items, in the order Discover shows them. People only see the items they have access to. With no items, Discover shows Popular.
Add an item
Paste the item's link, or its ID with the type chosen above. The list checks each item when you save.
Privacy-safe analytics
Only catalog-level aggregates that meet the configured minimum threshold are shown.
Select Refresh to load enabled aggregate metrics.
Adoption periods
| Period | Measure | Kind or action | Count |
|---|
Improvement suggestions
Suggestions are moderated here and never edit published content directly.
Select Refresh to load pending suggestions.
Agent inventory sync
Import Microsoft 365 Copilot package metadata into the hub catalog. Import does not share, assign, deploy, or grant access. Requires Microsoft Agent 365 and delegated Graph CopilotPackages.Read.All access.
Retained agent inventory
Check the last saved catalog and synchronization attempts. Active records include denied records and do not indicate user access. Counts describe this stored catalog, not the tenant total.
Select Refresh to load inventory status.
Published generation rows
Browse the saved provider inventory in pages of 20. Each request reads at most 20 agent records and may skip up to five empty inventory segments; continue to search the rest of the saved generation. Access and launch links are shown only when separately verified; retained metadata alone proves neither.
Search or start to load the first page.
Verify the configured completed run and saved checkpoint. Catalog readability is checked separately.
Advanced inventory checks
Observation only. This read does not authorize execution or confirm safe continuation.
Checkpoint read is not ready. Waiting for authenticated admin access.
Last admitted read on this page: none.
A fresh checkpoint is required. Skipped pages are not counted as verified.
Archived content
Content its owner or an admin archived. Restore puts it back as it was published, with the same owner and visibility. When a restore is not possible here, the row says why.
App ownership transfer
Transfers both ownership and responsible ownership, updates the public owner name and record versions, and changes who can manage the app and receive future access requests. This does not send an invitation or grant access.
Use the new owner's work email. We check that it's an active account in your organization.
Or select an active local owner registration. The server re-reads its registry ETag; the selection does not make the browser an identity authority.
Local owner identities
Owners registered from their own sign-in. Confirm the email address before it's used for notices. Confirming doesn't check who owns the mailbox and doesn't give access to anything in Microsoft.
Your owner registration
Register your sign-in so apps can be assigned to you as owner. You only need to do this once.
Sign in to see your owner registration.
Your sign-in is checked when you register.
Registrations have not been loaded.
Agent sharing
Inspect recorded sharing with users and groups. Organization package availability is shown separately and does not confirm sharing, effective access or group membership. Missing details remain unknown.
Select Refresh to read retained sharing records.
Advanced operations and diagnostics
Establish prospective app responsibility
Assign responsibility from now on for the one configured legacy app to your signed-in account. Original authorship, publisher and history remain unchanged. This separate operation requires server configuration and does not send an invitation or grant access.
Use the exact existing App submission reference independently verified from the intended account’s authenticated My submissions. Preflight verifies the configured signed-in account; it does not verify the reference entered here.
After you send this, this page won't let the app get another owner, even after an error or a new sign-in. Reloading or opening another tab removes that block, so don't use it to try again; check the status under App ownership transfer using the same owner reference as before. A reply from the server doesn't confirm the account match, that requests reach the new owner, email delivery or what users can open.
Fixed platform diagnostic
Runs two fixed platform queries only when the operator has staged a short-lived protected run. This does not enable discovery or establish pilot-agent visibility.
Provider-only discovery
Choose a platform for each of two agent names, then select the exact packages. Matches apply only within each selected platform. This does not publish a catalog entry or grant sharing, editing or ownership rights.
The designated operator stages the selected references in the existing protected configuration. Names and launch links are not package IDs. A selection download is not an acquisition envelope.
Refresh Agent 365 evidence
Read bounded Microsoft Graph package evidence for the preconfigured catalog bindings. This does not sync, create, publish, share, assign, or deploy agents.
Private recovery capture
Prepare the one-shot intent with the local client first. In native Save As, choose that prepared private folder directly. Do not use Downloads. A browser save is not a durable evidence receipt.
Off by default. Details are not shown here.
AH-060 launch mapping
The download contains private package identifiers and is not protected until moved. Downloads is temporary user-private storage only: immediately move, never copy, the file to approved user-only storage and follow the runbook.
The status check shows fixed local labels only. It does not display package identifiers or raw provider responses.