One sign-in for your whole fleet
Sign in from the desktop app and that computer joins your ace account. A headless build server joins by running ace login, which prints a sign-in link you can open anywhere. Your phone, the web app and your other computers then list every machine on the account and open it in one tap.
A device signed in to your account gets full access to the machines on it. There is nothing to scan or copy, and a new machine shows up everywhere as soon as it signs in.
Works from anywhere, readable only by you
When your phone can't reach a machine over your network or Tailscale, ace connects them through its relay on Cloudflare. The connection is end-to-end encrypted between your device and your machine, so the relay forwards what it can't read: never your prompts, code, transcripts or screens.
Every connection needs a fresh pass from your account that lasts five minutes. Sign a device out and it loses access to your machines within minutes.
A second lock on the machines that matter
Set a machine code, a PIN or a password, on any computer. Each device then enters it once before it gets in, so a stolen account sign-in alone doesn't open that machine. The machine checks the code itself, inside the encrypted connection; ace's servers never see it. Five wrong tries lock code entry for 15 minutes.
Optional, and still yours to run
You don't need an account to use ace. Pairing with a link or QR code, your local network, Tailscale and a relay you host yourself all keep working without one. Either way, your agents, code and provider logins stay on your computers.