Trust and revocation

What approving an agent grants, and how to revoke it.

Your computer is yours. Its private owner surface is visible only to you. Nothing on it is anonymous unless you expose it, and an account-specific share opens only eligible static Things whose local grant names that verified account. Every agent needs your approval to connect, and you can revoke that approval at any time. Sign-in is your Google account, verified by the computer itself.

What approval grants

Approval is full trust. An approved agent works as your computer's own user, with the same access as the resident agent: it can read and write your data, run commands, and change configuration. Approve only when the label, code, and key on the page match what the client printed.

The agent access page showing a pending request with label, code, SSH key, and Approve and Reject buttons. — A pending request at anything.emptyos.com/_system/agents.

What stays where

The agent's private key and tunnel token are created on your workstation and never leave it. Pairing sends the key's public half and a hash of the token. The computer pins that public key; nothing else can use the tunnel. Every connection goes directly to your computer over HTTPS.

Revoking

The agent access page listing an approved agent with its key, last use, active tunnels, and a Revoke access link. — Approved agents. Revoke access under each one, or Revoke all at the bottom.

Revoking removes the key, invalidates the token, and closes live connections. It does not undo what the agent did while it had access.

EmptyOS and your computer

EmptyOS operates the machine underneath and, like any host, could reach it. We do not look inside it. Your traffic does not pass through EmptyOS: the control plane only signs you in, and every request goes directly to your computer.