Access Your Agent
Desktop, public URL, and SSH — how each access surface works and when to use each one.
A running agent exposes three surfaces. The desktop is your primary workspace — the public URL and SSH are how you reach it from outside or from scripts.
Desktop
Full remote Linux desktop — terminal, browser, files, and your runtime all in one place.
Public URL
Your runtime's stable HTTPS endpoint for web UI access and API calls.
Tailscale SSH
Private shell access from your own machine over WireGuard.
When to use each
Use the desktop when you want the complete environment:
- Full terminal access
- GUI tools and browser already available inside
- File-oriented workflows
- Running AI coding tools (Claude Code, Codex, OpenCode, VS Code)
- Anything that doesn't fit a narrow runtime UI
This is the primary surface. Start here.
Click Open Desktop from the agent detail panel. Authenticate with the username and password from Access & Credentials.
Use the public URL when you need:
- To log into the runtime's web UI
- To hit the runtime's API from a script or tool
- A stable endpoint to share with an integration
Find it in Access & Credentials alongside your username, password, and runtime token. The URL stays stable for the life of the agent.
The public URL requires authentication — it's not an open endpoint. Use the runtime token or username/password depending on the runtime type.
SSH access requires Tailscale to be connected first.
Once connected:
ssh <username>@<tailscale-ip>Use the username and password from Access & Credentials. Standard port 22.
This is the right path for:
- Persistent terminal sessions from your local machine
- Local editor integration (VS Code Remote SSH, Neovim with remote plugins)
- Running long-running commands without keeping the desktop open
See Networking & SSH to set up Tailscale.