Home/Docs/Pair Device

Device Pairing Protocol

Cryptographic mutual authentication without transmitting sensitive hardware serial numbers or IP addresses.

FineTuneMyAI connects your browser control plane to your local compute node using an ephemeral, 6-digit one-time code.

Pairing Lifecycle

1. Request Code

The web dashboard generates an ephemeral 6-digit number valid for 10 minutes stored with a cryptographic bcrypt hash.

2. Agent Key Generation

The local agent generates an Ed25519 keypair on-device. The private key is stored in OS secure storage when available, with a permissions-restricted local fallback; only the public key is sent during pairing.

3. Claiming the Session

The agent submits the code and device capability profile to the cloud API over TLS via POST /api/v1/pairing/claim.

4. Token Issuance

The server verifies the code, assigns an anonymous opaque ID (dev_*), and immediately destroys the pairing session.

← Installation Guide Local Model Registry →