To confine Cockpit to a single machine, you can omit the "Hosts" element in the breadcrumb trail. The user then has no obvious way to navigate to a different machine.
To achieve this, use a URL like this:
https://server.example.com:9090/#server