The Hub at app.theonestack.com is where your MSP team signs in. Every app, every setting, and the agent installer start here. Use this page as a map: find what you need, click the link, and you'll land on the right screen.
The One Stack is one platform with one sign-in: run the business (PSA, CRM, Clarity, THEO, Voice, Legal, Workflows), manage devices and networks (RMM, CMDB, Fleet, Edge, Backups, Hearth), secure clients (Defend, Shield, Cypher, CyberAssure), serve your clients through HCP, and connect everything with Bridge and Migrate. Every app is on this page.
Fastest way to find anything: search. Open Search in the Hub to look across your workspace, or open My Apps to see every app your organization can open.
You'll see only the apps your organization has. Each app opens only for organizations that have it. If a link here doesn't open an app for you, your organization doesn't have that app yet. Ask your Owner. Some Settings pages are also limited by role: Owners and Admins see most of them, and a few are Owner only (marked below).
The Hub itself
These are in the Hub sidebar for everyone on your team.
| You want to… | Go to |
|---|---|
| Open any app you have | My Apps |
| See your workspace overview | Dashboard |
| See every product and which ones your org has | Products |
| Catch up on alerts and mentions | Notifications |
| Work through the setup checklist, or resume setup | Get Started |
| Get help from The One Stack | Support |
| Install the agent on a device, or see enrolled devices | Endpoints → Install · Devices · Groups |
Run the business
| App | What it's for | Open it | Learn it |
|---|---|---|---|
| PSA | Tickets, time, contracts, and invoicing your clients | PSA | PSA user guide |
| Projects (in PSA) | Project plans, tasks, and milestones | PSA → Projects | What is Projects? |
| OnCall (in PSA) | On-call schedules, alerts, incidents, and after-hours coverage. Reports, Analytics, and Fatigue Manager are inside On-Call. | On-Call · Reports · Analytics · Fatigue Manager | What is OnCall? · On-Call reports |
| Field Service (in PSA) | Dispatching techs to client sites | PSA → Field Service | See the PSA user guide |
| CRM | Companies, contacts, deals, quotes, and activities. Cypher and eSign also live inside CRM. | CRM · Companies · Contacts | Adding companies |
| eSign (in CRM) | Send documents for signature. eSign is an add-on inside CRM, not a separate app. | CRM → eSign | What is eSign? |
| Clarity | Dashboards, metrics, and client reports for your MSP | Clarity |
What is Clarity? Connect your PSA to Clarity |
| THEO | The AI assistant built into every app, plus its own chat workspace for questions, runbooks, and reports | THEO | What is THEO? |
| Voice | Phone system: calls, SMS, voicemail, call queues, and IVR | Voice | What is Voice? |
| Workflows | App-to-app workflows across The One Stack. Called The One Workflows in My Apps. Free and bundled. Start a new one in Studio (/workflows/new). |
Workflows | What is Workflows? |
| Legal | Plans, policies, and documents for your MSP, including work with your legal partner | See availability | What is Legal? |
Manage devices and networks
| App | What it's for | Open it | Learn it |
|---|---|---|---|
| RMM | Monitor and manage client devices | RMM | RMM user guide |
| RMM → Policies | Monitoring and configuration policies | RMM → Policies | |
| RMM → Patching | Patch status, patch policies, and rollouts | Patch management · Patches · Patch policies · Rollouts | |
| RMM → Scripts and jobs | Run scripts and check job results | Scripts · Jobs | |
| RMM → Remote access | Open a device in RMM/Endpoints, then choose Connect. There is no working Hub deep link at /connect (see JPT-523). |
RMM devices (then Connect on a device) | |
| RMM → Automation → Agentic Automation | Automations that act on device alerts | Runbooks · AI Agents | |
| RMM → AI Agents | AI Agents, under Automation → Agentic Automation. AI Agents are part of RMM, not Workflows. Tier Zero is included at no extra cost. | AI Agents · How AI Agents differ from Workflows | |
| RMM → Network (formerly Pulse) | Network monitoring: sites, collectors, monitors, topology, and speedtests | RMM → Network · Network monitoring guides | |
| CMDB | Client assets, configurations, passwords, and runbooks | CMDB |
CMDB user guide Find CMDB in the Hub |
| Fleet | Vehicles, drivers, maintenance, and fleet compliance | Fleet | What is Fleet? |
| Edge | Always-on SASE VPN and site networking: Dashboard, Tenants, Gateways, Users, Groups, Firewall, DNS Security, Posture, Private Apps, Analytics, Security Events, Compliance, Alerts, Policy Templates, and Audit (all under /edge/*) |
Edge | What is Edge? · Find your way around Edge |
| Backups | Device and cloud backups, restore points, bare-metal restore, and ransomware recovery | See availability | What is The One Stack Backups? |
| Hearth | Proxmox virtualization hosting: Hosts, VMs, and Settings. Included with The One Stack, with no separate SKU. | Hearth · VMs | What is Hearth? |
Edge is software only: users connect with the Edge client. Bridge appliances are retired. A dedicated static egress IP per site is an Edge capability.
Pulse and Tier Zero are now part of RMM. Pulse network monitoring is RMM → Network (/rmm/network), and old /pulse links take you to RMM. Old Tier Zero links take you to RMM → Automation → Agentic Automation (/rmm/automation-hub/runbooks for runbooks; not /rmm/runbooks). Network monitoring how-tos are still in the Pulse section.
Secure clients
| App | What it's for | Open it | Learn it |
|---|---|---|---|
| Defend | Endpoint detection and response (EDR) for every client | Defend | What is Defend? |
| Shield | Shield DNS web filtering, plus Shield Sentinel student-safety monitoring for schools on Google Workspace | Shield | DNS filtering · What is Sentinel? |
| Cypher | Security awareness training, phishing and vishing simulations, dark-web monitoring, and compliance. You run it from CRM → Cypher (Dashboard, Phishing, Vishing, Training, Episodes, Dark Web, Compliance). Your clients' users train in HCP under Security and Training → Training Dashboard (/portal/training). |
Cypher | What is Cypher? · Training campaigns · Cypher in HCP |
| CyberAssure | Client cyber-risk scores, risk registers, and incident command | CyberAssure | What is CyberAssure? |
Older Security and Threat Intel links now open Defend.
For your clients (HCP)
HCP (Hub Client Portal) is the branded portal your clients sign in to. You set it up from the Hub; your clients never need a Hub seat.
| App | What it's for | Open it | Learn it |
|---|---|---|---|
| HCP | Your clients submit tickets, ask THEO for help, see their devices and backup status, take Cypher training, and pay invoices | Client Portal branding · Organization branding · Client Portal Forms | HCP section · White-labeling HCP |
Connect your tools
| App | What it's for | Open it | Learn it |
|---|---|---|---|
| Bridge | Connects your existing PSA, RMM, documentation, and accounting tools, plus the API. Also called Integrate. This is also Settings → Integrations & API. | Bridge | What is Bridge? |
| Migrate | Move client files and mailboxes: on-premises to cloud and local archival | See availability | What is Migrate? |
Not offered at launch
Backups, Legal, and Migrate aren't offered for purchase or activation at launch. Their Help Center pages explain how each one works so you can plan ahead. To hear when one becomes available, submit a request.
Quiet isn't offered and isn't in the launcher. Quiet is not the same as Edge: for always-on SASE VPN, see What is Edge?
Settings
Open Settings from the Hub sidebar. Owners and Admins see these pages unless a row says otherwise.
| You want to… | Go to | Learn it |
|---|---|---|
| Edit your company name, details, and branding | Organization · Branding | Organization settings |
| See invoices and payment details (Owner, Admin, Finance) | Billing | Billing overview |
| Invite or manage teammates | Users | Inviting users |
| See who can open what across the org | Access Overview | User roles |
| Create custom roles | Roles | Custom roles |
| Review who did what (Owner only) | Audit Log | Audit log |
| Set up and brand HCP (Hub Client Portal) | Client Portal · Branding · Client Portal Forms | White-labeling the client portal |
| Connect integrations or use the API | Integrations & API · API Keys (Owner only) | API keys |
| Send email from your own domain | Sending Domains · Email Templates | — |
| Add custom fields and tags | Custom Fields · Tags | — |
| Choose which notifications your org gets | Notifications | — |
| Export data or manage privacy (Owner only) | Data & Privacy | Data export |
Common questions
A link here opened Products instead of the app. Why?
Your organization doesn't have that app, or a page isn't available at launch. Check Products to see what your org has, then ask your Owner.
I don't see Settings pages like Audit Log or API Keys.
Those are Owner only. Most other Settings pages need the Owner or Admin role. See User roles.
Where did Teams go?
Teams were removed. Access is now set per person in Settings → Users, and Access Overview shows who has what.
I'm new. Where should I start?
Follow Start here and the guided Get started.