ComfyUI-MSS-Login¶
The next-generation security, governance, permissions, and multi-user control system for ComfyUI.
ComfyUI-MSS-Login adds role-based access control (RBAC), UI enforcement, workflow protection, IP filtering, user environment tools, and a public NSFW Guard API so other extensions can integrate safe-for-work enforcement.
Building a mobile client?¶
Start with these guides for a smooth API-token flow from login through image download:
- Authentication — API tokens, Bearer headers, permissions
- Image generation pipeline —
/prompt→ queue/history →/view - Model download API — CivitAI / Hugging Face downloads from mobile or scripts
- Mobile and Comfy Portal — Comfy Portal and troubleshooting
Quick links¶
- Installation — Install the node and configure ComfyUI
- Configuration — config.json, environment variables, roles, ntfy
- Authentication — JWT, API tokens, MFA, remote API guard
- Image generation pipeline — End-to-end run flow for API clients
- Model download API — Queue CivitAI/Hugging Face downloads via Bearer token
- Headless JWT session — WebSocket and REST only (no HTML)
- NSFW and outputs — Save-time and
/viewenforcement - Extending the node — Use the HTTP API and Python extension API in your projects
- API Reference — All custom HTTP endpoints (auth, admin, user, MFA, recovery)
- ComfyUI client APIs —
/prompt,/queue,/history,/view,/ws - Workflow & intercepted endpoints — Userdata workflows,
/view,/prompt - Mobile and Comfy Portal — iOS/Android integration notes
- NSFW Guard API — Python API for other ComfyUI extensions
Key features¶
| Feature | Description |
|---|---|
| RBAC | Five roles (Owner, Admin, Power, User, Guest) with configurable permissions in mss_login_groups.json |
| UI enforcement | Dynamic hiding/blocking of menu items, extensions, and workflow save/load for restricted roles |
| Workflow protection | Per-user workflow storage; save/delete blocked for non-privileged users |
| IP filtering | Whitelist/blacklist with live editing in the settings panel |
| NSFW Guard API | Public Python API and HTTP endpoints for NSFW detection and manual tagging |
| Extension Tabs API | JavaScript API for other extensions to add tabs to the mss-login admin panel |