Full platform access · every action here is logged and cannot be erasedChanges are audit logged

Emergency controls

Network-wide actions. Every one of them is felt by real customers immediately.

Right now: 5 people are charging

These are not abstractions. Anything on this page reaches a person standing next to a car within seconds. If a single charger is the problem, take that charger out of service from the operator console instead - that is the proportionate tool and it is one click away.

Stop all charging

critical

Sends RemoteStopTransaction to every connector with an active session and refuses new starts until re-enabled.

What actually happens: Every customer currently charging is cut off mid-session. They are billed only for the energy delivered, but they will be standing at a charger with a car that has stopped charging and no explanation unless you send one.

Block new sessions

high

Existing sessions run to completion. No new session can start at any station.

What actually happens: Softer than a full stop - nobody is interrupted, but arriving customers find the whole network unavailable. The usual choice when something is wrong but nobody is in danger.

Disable payments

high

Stops all authorisation and capture across every provider. Sessions cannot start because they cannot be paid for.

What actually happens: Use when a provider is double-charging or the payment layer is misbehaving. Money stops moving in both directions - including refunds, which finance will notice.

Lock platform

critical

Read-only. Every console and the app stop accepting writes. Nobody can start, stop, charge, refund or configure anything.

What actually happens: The biggest hammer here. Reach for it during a suspected compromise, when the priority is that nothing further changes while you work out what happened.

Before you use any of these

  • •Is it one charger or the network? Almost every real incident is one charger. Taking the fleet down for a single faulty connector costs revenue and trust for no safety benefit.
  • •Physical danger overrides everything. If there is any chance of harm - smoke, arcing, a damaged cable - stop charging first and investigate second. Revenue is recoverable; people are not.
  • •Tell customers. None of these controls send a message. A stopped session with no explanation turns an incident into a support queue and a review problem. Send the comms.
  • •There is no undo. Re-enabling restores service, but it does not restart anyone's session or refund anyone's inconvenience.