Setup guides
Connect a computer safely
Umbraco uses an outbound worker connection, an owner-created one-time pairing file, and a project folder you choose. The installer does not require inbound access to the computer.
Installation
Sign in to the owner control centre first, expand Add a computer, download the matching installer, and create a pairing file.
AI assistant connection
After pairing a computer, connect Umbraco.AI to ChatGPT or Codex, add the hosted connector to Claude, or configure the advanced local gateway for Gemini CLI.
Accounts and invitations
- The deployment operator opens Deployment access and creates a one-time invitation for the user.
- The user enters that code under Create an account with an invitation and continues with Google or GitHub.
- The user enrolls a separate Umbraco authenticator. Provider approval alone never completes sign-in.
- Each account sees only its own computers, jobs, controller credentials, and AI assistant grants.
Invitations expire after 24 hours and cannot be reused.
How access works
- The computer polls your HTTPS relay while it is awake.
- Pairing credentials are unique per computer and can be revoked by its account owner.
- Remote commands and application launch require the desktop approval controls.
- Wake-on-LAN uses only the paired computer's recorded public IPv4 address and configured MAC address.
The operator can review deployment accounts and operational access principals on the operator-only deployment access page.
Deployment accessSecurity boundaries
Keep pairing files and owner credentials private. Use a dedicated project folder. Revoke a computer or assistant connection when it should no longer have access. Unsigned macOS developer builds are for controlled testing; do not disable Gatekeeper.