Devices

3 paired · sorted by risk

All 3 of 3 paired devices · full scope · auto-approve ON

Any device that can reach the gateway can pair without review. Hardening lands in P9-04 — gate write actions on admin auth, then disable auto-approve and require per-device approval.

Device	Scope	Created	Last seen	Auto-approve
MacBook Pro (FWT) macbook-pro-fwt	⚠ FULL SCOPE granted: agents.read, agents.write, jobs.run, devices.write, plugins.write, gateway.admin	—	— stale	on
iPhone 15 Pro iphone-15-pro	⚠ FULL SCOPE granted scopes · stub · P9	—	— stale	on
iPad Pro M4 ipad-pro-m4	⚠ FULL SCOPE granted scopes · stub · P9	—	— stale	on

Pending approvals · 0

No devices waiting for approval.

While auto-approve is ON, requests grant immediately. Disable auto-approve in the policy panel to start gating new devices.

Pairing policy

Inferred from paired devices today; live policy endpoint lands in P9-04 alongside the admin auth gate.

Auto-approve new pairing requests

When ON, any device requesting pairing is automatically granted the default scope. Disable to require manual approval per-device.

on · unsafe

Default scope for new pairings

New pairings inherit this scope. read is sufficient for dashboard-only devices.

full