Skip to content
Muse4AI
ENVI

Type at least one word. Vietnamese works with or without accents.

    Chapter · Settings & remote access

    Remote access

    Let a cloud agent reach your PC through a tunnel or HTTPS domain, or share only within a trusted private network.

    Updated Markdown for AI

    Before you start

    • Enable API for agents and create a separate key for the remote agent.
    • Keep this PC awake and the app running while remote agents need it.
    • A public address makes the server reachable; it does not remove key requirements.

    1. 1Choose who can connect

      Open Settings › API & agent. The access choices are This machine only, Private network, Quick tunnel, and Named tunnel.

    2. 2Use a Quick tunnel for a temporary link

      Confirm public sharing and wait for the tunnel to be online. The app uses cloudflared. The address changes each time the app starts, so update your cloud agent after a restart.

    3. 3Choose a fixed address if needed

      A named tunnel uses your Cloudflare setup and domain. The separate domain section can provide direct HTTPS using App-managed HTTPS with Caddy, or an Existing HTTPS proxy such as Caddy, nginx, or IIS. Follow its DNS and connectivity checks; these routes can coexist with a tunnel.

    4. 4Use private sharing only where reachable

      Private network is for devices that can reach your PC through a LAN or private network such as Tailscale. It is not automatically a public link for a cloud service.

    5. 5Copy the address and limit exposure

      Use the current public base with /mcp for MCP or /v1 for REST, plus the agent’s key. Turn off sharing when it is not needed; disable a separately enabled domain too.

      text
      https://your-tunnel.trycloudflare.com/mcp
Authorization: Bearer msk_YOUR_KEY

    Check it worked

    The intended remote agent can read status with its key, and unnecessary sharing is off.

    If it doesn't work

    Why did yesterday’s link stop working?

    Quick tunnel addresses change at app startup. Copy the current address into the agent again.

    Why does a public URL still need a key?

    The tunnel changes reachability, not authorization. Protected operations still require an active key.

    Does turning off the tunnel stop my domain?

    The domain is configured separately and can run alongside a tunnel. Check both, or disable the API entirely.