Core Platform
Productivity Suite
Client & Investor
Development & Data
AI & Language Models
Trading
Administration
📄 Document Generation & Design Studio
Auto-generate branded PPTX, DOCX, and PDF reports from platform data. Optionally refine in Penpot before sharing.
Document Flow Architecture
Report Templates
Service Credentials
XptoXpto*6670 · Team password: Gritseek*2026!
| Service | URL | Username (PGameiro) | Username (GritseekTech) | Notes | Action |
|---|---|---|---|---|---|
| COCOON.FIN | cocoonfin.gritseek.com | PGameiro |
GritseekTech |
Tier 5 · TOTP MFA · Full platform | |
| Odoo CRM | odoo.gritseek.com/web | pedro.gameiro@gritseek.com |
tech@gritseek.com |
Login by email · Odoo 17 | |
| Superset BI | superset.gritseek.com | PGameiro |
GritseekTech |
8 dashboards · 34 datasets · 40 queries | |
| Mayan EDMS | mayan.gritseek.com | PGameiro |
admin |
Document management · Docker | |
| JupyterHub | jupyter.gritseek.com | pgameiro (lowercase!) |
gritseektech |
Quant Engine kernel · Python 3.12 | |
| VS Code IDE | workstation.gritseek.com/code/ |
code-server 4.118 · Full IDE | 💻 Open | ||
| Grist | grist.gritseek.com | N/A |
tech@gritseek.com (default admin) |
Boot key: ec26ce12-b77d-403e-... |
|
| OnlyOffice | office.gritseek.com | N/A — Document server (no login) |
Collaborative editing | 🔗 Open | |
| Penpot | design.gritseek.com | pedro.gameiro@gritseek.com |
tech@gritseek.com |
Design tool · Open source Figma | |
| MQL5 Community | mql5.com | GritseekTech |
XptoXpto*6670 |
tech@gritseek.com | 🔗 |
| MetaTrader 5 Demo | trade.mql5.com | 5050359370 |
LtVI4IHe |
MetaQuotes-Demo · Investor: T@Y8AqLk | 🔗 |
| OpenRouter | openrouter.ai | tech@gritseek.com | tech@gritseek.com | DeepSeek V4 Flash · API key configured | 🔗 Open |
| Google AI Studio | aistudio.google.com | tech@gritseek.com | tech@gritseek.com | Gemini 2.5 Flash · API key configured | 🔗 Open |
| Groq Cloud | console.groq.com | tech@gritseek.com | tech@gritseek.com | Llama 3.3 70B · API key configured | 🔗 Open |
| HuggingFace | huggingface.co | tech@gritseek.com | tech@gritseek.com | Model Hub · Inference API · Open-source ML | 🔗 Open |
| Investor Portal | investor.gritseek.com | PGameiro |
GritseekTech |
Fund performance · LP access | |
| Client Portal | portal.gritseek.com | PGameiro |
GritseekTech |
Client access · Subscription | |
| Anaconda Cloud | anaconda.org | Package hosting · Environment sharing | GritseekTech / XptoXpto*6670 | 🔗 | |
| Anaconda Assistant | Via JupyterHub | pgameiro |
AI-powered BI query generation · Natural language → SQL | ✅ | |
| Spyder IDE | Via JupyterHub | pgameiro |
Production scripting · Quant Engine maintenance | ✅ | |
| OnlyOffice | office.gritseek.com | tech@gritseek.com |
JWT Auth · Docs/Sheets/Slides | ✅ | |
| Grist Data Module | grist.gritseek.com | tech@gritseek.com |
Python-powered data tables · Relational linking | ||
| Health Monitor | health.html | All services real-time status | No login required | 🔗 | |
| PostgreSQL | 204.168.211.95:5432 | postgres |
DB: gritseek_master · 135+ tables | CLI only | |
| Hetzner SSH | 204.168.211.95 | root |
CX33 · 4 vCPU · 8GB RAM · Ubuntu 24.04 | CLI only | |
| Hetzner Console | console.hetzner.com | tech@gritseek.com |
Cloud management · 2FA via email | Manual | |
- Auto-login generates a time-limited security token (valid ~10 minutes) and authenticates server-side
- COCOON.FIN, Investor Portal, and Client Portal auto-login includes TOTP MFA bypass (server-generated codes)
- Grist uses default email (
tech@gritseek.com) — no password login - OnlyOffice is a document server with no user authentication
- PostgreSQL and Hetzner SSH require command-line access
- Tier-Based Provisioning: Services are auto-provisioned based on user tier (1-5)
- Tier 1 (Viewer): COCOON.FIN + Client Portal
- Tier 2 (Analyst): + Odoo CRM + Grist
- Tier 3 (Manager): + Superset + OnlyOffice + Investor Portal
- Tier 4 (Director): + Mayan EDMS + Penpot
- Tier 5 (Super Admin): + JupyterHub + VS Code + Anaconda + MT5
- All services auto-connect on first registration — no manual setup needed
BI Queries (40 saved)
| Query | Category | Description | SQL | |
|---|---|---|---|---|
| AML Screening Hits and Flags | compliance | Contacts flagged by AML screening with risk details | ||
| Cross-Platform Entity Completeness | compliance | Entities missing platform links | ||
| Overdue KYC Report | compliance | Contacts with pending, expired, or incomplete KYC documentation | ||
| Regulatory Deadline Tracker | compliance | Tracks document expiry dates and compliance deadlines by jurisdiction | ||
| Universal Entity Audit | 22 BI views · Cross-platform joins · Self-learning ML audit | |||
| Master Sync Point | PostgreSQL · Odoo ↔ MT5 ↔ Platform ↔ COCOON.FIN · universal_entity_id | compliance | Cross-platform entity mapping verification | |
| Board Deck Metrics | executive | Comprehensive metrics package for board presentation | ||
| Client 360 Full View | executive | Complete client profile with all relationships | ||
| Executive Dashboard KPIs | executive | Top-level platform health metrics | ||
| Fundraising Progress Dashboard | executive | Investment round progress with investor pipeline metrics | ||
| Platform Health & Engagement Summary | executive | User engagement, feature usage, and platform health metrics | ||
| Weekly CEO Dashboard | executive | Key metrics snapshot for weekly executive review | ||
| Capital Committed vs Target by Round | investor | Shows each investment round progress against target raise amount | ||
| Investor Conversion Rates by Period | investor | Funnel conversion rates between investor lifecycle stages for a given date range | ||
| Investor Pipeline by Stage | investor | Shows investor pipeline distribution across lifecycle stages with total deal value | ||
| Portfolio AUM Distribution | investor | AUM by portfolio type and organisation | ||
| Time-to-Close Analysis | investor | Average days from lead creation to commitment/funding, grouped by source and tier | ||
| Top Engaged Investors (Dataroom Activity) | investor | Investors ranked by dataroom engagement metrics | ||
| Investor Pipeline Status | investor_relations | Dataroom access and KYC pipeline | ||
| API Usage Hot Spots | operations | Clients approaching API limits | ||
| Support SLA Compliance | operations | SLA performance across all tiers | ||
| Churn Prediction Signals | revenue | Active subscriptions showing churn risk indicators | ||
| Client Acquisition Funnel | revenue | Pipeline from prospect to active client | ||
| Client Lifetime Value | revenue | Revenue per client since onboarding | ||
| Cohort Retention Analysis | revenue | Subscription retention by monthly signup cohort | ||
| Expansion Revenue Opportunities | revenue | Active subscriptions with potential for tier upgrades based on usage | ||
| MRR/ARR Waterfall | revenue | Monthly recurring revenue breakdown and annual run rate | ||
| Subscription Churn Risk | revenue | Clients with renewal imminent or usage declining | ||
| Concentration Risk Analysis | risk | Portfolio concentration metrics and HHI index | ||
| Counterparty Exposure by Broker | risk | Trading exposure concentration by broker and account type | ||
| Portfolio Concentration Risk | risk | Top holdings across all portfolios | ||
| Risk-Adjusted Returns Leaderboard | risk | Portfolios ranked by Sharpe ratio | ||
| Stress Test Results Summary | risk | Latest stress test results across all portfolios | ||
| VaR Breach Analysis | risk | Portfolios where daily loss exceeded VaR thresholds | ||
| Best and Worst Performing Models | trading | Model performance ranking by net PnL and win rate | ||
| Daily Trade Reconciliation | trading | Trade activity for current day reconciliation | ||
| Drawdown Analysis by Strategy | trading | Maximum drawdown and risk-adjusted returns by strategy | ||
| Monthly Trading Activity | trading | Trade counts and volumes by month | ||
| Open Positions Summary | trading | Current open positions with unrealised PnL by account and strategy | ||
| Strategy PnL Attribution | trading | PnL breakdown by strategy with performance metrics | ||
| Win Rate Heatmap by Strategy and Direction | trading | Win rate matrix across strategies, models, and trade directions |
Full Integration Architecture
PostgreSQL — Central Nervous System
Database gritseek_master (135 tables, 16 views) + gritseek_odoo (Odoo data via Foreign Data Wrapper)
Odoo ↔ PostgreSQL Cross-DB Integration
13 Odoo tables accessible from gritseek_master via Foreign Data Wrapper (FDW)
| Foreign Table | Purpose | Sync |
|---|---|---|
odoo.res_partner | Contacts/clients | Real-time FDW |
odoo.crm_lead | CRM opportunities | Real-time + 15-min cron |
odoo.sale_order | Sales orders | Real-time FDW |
odoo.account_move | Invoices | Real-time FDW |
odoo.hr_employee | Team members | Real-time FDW |
odoo.project_project | Projects | Real-time FDW |
odoo.project_task | Tasks | Real-time FDW |
Superset ↔ COCOON.FIN Command Centre
Dashboards embeddable in Command Centre via iframe proxy at cocoonfin.gritseek.com/superset/
| # | Dashboard | Data Sources |
|---|---|---|
| 1 | Executive Overview | bi_executive_summary, bi_revenue_pipeline |
| 2 | CRM & Sales Pipeline | bi_crm_funnel, crm_prospect_tracking, odoo.crm_lead |
| 3 | Platform Analytics | bi_api_usage, bi_trade_flow, platform_events |
| 4 | Client 360 | bi_client_360, bi_user_360, subscriptions |
| 5 | Operations & Team | bi_odoo_team, bi_odoo_projects, hr_employee |
| 6 | Compliance & KYC | bi_kyc_compliance, kyc_workflow |
| 7 | Revenue & Subscriptions | bi_revenue_pipeline, subscriptions |
| 8 | Odoo Business Operations | odoo.res_partner, odoo.sale_order, odoo.account_move |
Mayan EDMS Integration
12 document types · 8 cabinets · KYC/NCNDA docs linked to Odoo contacts
Portal Authentication Flow
Team Accounts (14 members)
| Username | Tier | Role | Status | |
|---|---|---|---|---|
PGameiro |
pedro.gameiro@gritseek.com | Tier 5 | Founder & Executive Chairman | Active |
RBahadur |
rodwin.bahadur@gritseek.com | Tier 5 | ED & CEO | Active |
CFO |
cfo@gritseek.com | Tier 4 | Chief Financial Officer | Placeholder |
CIO |
cio@gritseek.com | Tier 4 | Chief Investment Officer | Placeholder |
CTO |
cto@gritseek.com | Tier 4 | Chief Technology Officer | Placeholder |
SeniorDev |
senior.dev@gritseek.com | Tier 3 | Senior Full-Stack Developer | Placeholder |
MLEngineer |
ml.engineer@gritseek.com | Tier 3 | Backend / ML Engineer | Placeholder |
ProductMgr |
product.manager@gritseek.com | Tier 3 | Product Manager | Placeholder |
SalesDir |
sales.director@gritseek.com | Tier 3 | Sales Director | Placeholder |
ComplianceA |
compliance@gritseek.com | Tier 3 | Compliance / RegTech Analyst | Placeholder |
MarketingMgr |
marketing@gritseek.com | Tier 3 | Marketing Manager | Placeholder |
Designer |
designer@gritseek.com | Tier 2 | Chief Designer | Placeholder |
ClientCSM |
client.success@gritseek.com | Tier 2 | Client Success Manager | Placeholder |
SocialMgr |
social.media@gritseek.com | Tier 2 | Social Media Manager | Placeholder |
GitHub Repository Access Tiers
Repo: GritseekVentures/COCOON-FIN (Private) · 280K+ lines · CI/CD webhook active
| Tier | Team | Permission | Description |
|---|---|---|---|
| Tier 5 | executive-leadership |
admin |
Full admin: settings, webhooks, secrets, branch protection |
| Tier 4 | executive-leadership |
admin |
Full admin: same as Tier 5 |
| Tier 3 | engineering |
push |
Write: push code, create branches, merge PRs |
| Tier 2 | operations |
triage |
Triage: manage issues, review PRs, read code |
| Tier 1 | viewers |
pull |
Read-only: clone and view code |
CI/CD Pipeline
esbuild 0.24.0 · Bundle: ~9.5MB · Auto cache-bust
PostgreSQL Schema
Connection Details
| Parameter | Value |
|---|---|
| Host | 204.168.211.95 (or 127.0.0.1 from Hetzner) |
| Port | 5432 |
| Primary DB | gritseek_master |
| Odoo DB | gritseek_odoo |
| User | postgres |
| REST API | https://db.gritseek.com (PostgREST v12.2.3) |
Key Tables
| Table | Purpose |
|---|---|
users | All platform users (bcrypt auth, UUID PKs) |
clients | Client organisations |
investors | LP/investor records |
subscriptions | Plan subscriptions + billing |
crm_prospect_tracking | Sales pipeline (synced from Odoo) |
crm_interactions | Client touchpoints |
crm_conversion_metrics | Funnel metrics + churn tracking |
team_members | Internal team registry |
platform_events | Audit log |
github_access_tiers | Repo permission mapping |
User Provisioning
Quick Provision Command
ssh root@204.168.211.95
python3 /opt/gritseek/provision_team.py \
--email firstname.lastname@gritseek.com \
--name "First Last" \
--username FLast \
--tier 3 \
--department Technology
Creates accounts across: COCOON.FIN, Odoo, Superset, Mayan, JupyterHub
CRM Sync (Automatic)
Odoo CRM leads sync to crm_prospect_tracking every 15 minutes via cron
*/15 * * * * python3 /opt/gritseek/odoo_crm_sync.py
Desktop COCOON.FIN
Version 2.0 — Gritseek Ventures Ltd — Institutional Finance Operating System
📥 Download
Package: ~15 KB lightweight launcher • Requires Python 3.8+ • Built with PyWebView
Overview
The Gritseek Desktop App provides one-click access to all 15+ platform services from your desktop. Built with PyWebView for a native experience on Windows, macOS, and Linux. Each service opens in its own tab with automatic session management.
Installation Guide
Option A — Quick Start
# 1. Download and extract
Invoke-WebRequest -Uri "https://workstation.gritseek.com/COCOON-FIN-Desktop-v2.0.zip" -OutFile "COCOON-FIN-Desktop-v2.0.zip"
Expand-Archive -Path "COCOON-FIN-Desktop-v2.0.zip" -DestinationPath "COCOON-FIN-Desktop"
# 2. Install dependencies
cd COCOON-FIN-Desktop
pip install -r requirements.txt
# 3. Launch
python main.py
Option B — Build Standalone .exe
# After installing dependencies:
build.bat
# Output: dist/COCOON-FIN-Desktop.exe
Requires: Python 3.8+ from python.org • pip (included with Python)
Accessible Services
| # | Service | URL | Login Method | Port |
|---|---|---|---|---|
| 1 | Workstation Dashboard | workstation.gritseek.com | Email + Password | 443 |
| 2 | COCOON.FIN Analytics | cocoonfin.gritseek.com | Username + Password | 443 |
| 3 | Odoo ERP | odoo.gritseek.com | Email + Password | 8069 |
| 4 | Apache Superset | superset.gritseek.com | Username + Password | 8088 |
| 5 | JupyterHub | jupyter.gritseek.com | Lowercase username + Password | 8888 |
| 6 | Mayan EDMS | mayan.gritseek.com | Username + Password | 8000 |
| 7 | Grist | grist.gritseek.com | Email + Password | 8484 |
| 8 | OnlyOffice | office.gritseek.com | Email + Password | 8082 |
| 9 | Penpot Design | design.gritseek.com | Email + Password | 9001 |
| 10 | MQL5 Community | mql5.com | Username + Password | — |
| 11 | MetaTrader 5 Web | trade.mql5.com | Login + Password | — |
| 10 | Investor Portal | investor.gritseek.com | Username + Password | 443 |
| 11 | Client Portal | portal.gritseek.com | Username + Password | 443 |
| 12 | Database API | db.gritseek.com | No login (REST) | 3003 |
| 13 | Health Monitor | workstation.gritseek.com/health.html | No login | 443 |
Note: MetaTrader 5 Web Terminal is available at trade.mql5.com. Desktop version: metatrader5.com.
Troubleshooting
| Issue | Solution |
|---|---|
| Blank screen on launch | Check internet connection; ensure Python 3.8+ is installed |
| PyWebView not found | pip install pywebview |
| GTK errors (Linux) | sudo apt install python3-gi gir1.2-webkit2-4.1 |
| SSL certificate errors | pip install --upgrade certifi |
| Login fails | Verify credentials at workstation.gritseek.com first |
| App window doesn’t appear | Kill any existing Python processes: taskkill /F /IM python.exe (Win) or pkill python3 (Mac/Linux) |
| Firewall blocking services | Ensure ports 443, 8069, 8088, 8000, 8484, 8082, 9001 are reachable |
Support
Created using COCOON.FIN, a product by Gritseek® • Gritseek Ventures Ltd • 71-75 Shelton Street, Covent Garden, London WC2H 9JQ • CH 14792628