Intendant Connect

Your computers, anywhere.

Sign in with a passkey to find machines linked to your account. Linking is discovery only: daemon control still requires loopback or independently verified direct mTLS and a grant approved through a trusted root surface. No signed/notarized native release exists for this alpha.

Account handle

New here?

Passkeys onlyNo passwords. Your devices already sync the key.
Honest limitsConnect serves this code and handles accounts, routes, availability, fleet metadata, and optional push delivery; daemons alone mint access. See the complete trust boundary.
Self-hostableRun your own rendezvous — read how.

Advanced — account identity, organizations, sync encryption, audit trail

Account

This user id identifies Connect account, route, and audit metadata. It never authenticates to a daemon. Browser identity keys are metadata-only in this alpha; use loopback or independently verified direct mTLS for control.

Organizations

Signed membership-document records already stored in this browser origin. Connect does not present them to daemons. Human browser-key subjects are record-only in this alpha; usable access still requires a trusted mTLS or peer identity.

What this account can and cannot do

It is rendezvous and navigation only — it grants nothing by itself. Every daemon decides access through its own local IAM. Daemon-signed link acknowledgements are checked against the key Connect recorded, which proves consistency with that directory record but is not an independent first-introduction pin: Connect also serves the record and this browser code. Private fields in Saved places sync end‑to‑end encrypted when your passkey supports PRF. The full story.

Verified identity

Optionally prove this handle is yours by publishing a claim you control. Verification is decoration — keys stay the identity — and every verified badge is committed to this service’s public transparency log. Your claim line:

Transparency log

Every name binding this service hands out (which daemon key Connect recorded for a linked computer, handle creations, revocation lists, badges) is committed to an append-only log. Your browser pins the signed tree head and re-verifies consistency on every visit — later rewriting is detectable, but the first key introduction and browser code are still trusted to this Connect deployment.

checking…

Notifications

Get a notification on this browser when one of your computers goes offline or comes back — and, if you opt in, when an agent is stuck waiting on you (a command approval or a question) with no dashboard open. Request alerts carry only the kind of request plus the computer and session names, never what the agent is doing. All alerts are delivered encrypted to this browser alone.

checking…

Audit

Recent account activity on this rendezvous.

Self-host

This origin (https://intendant.dev) is one instance of an open component. Run your own and point your daemons at it.