For graphical work

Desktop control

An agent that works on your own computer over Tailscale and SSH. What happens there stops one move short of doing the work for you.

Desktop control, step by stepYou register your own computer by its tailnet name; it needs Tailscale and an SSH server. You enable it for one tailnet session, and the host must also be approved as a tailnet target. An action is picked (PowerShell command, shell command, fetch a file or screenshot), the attempt is recorded before anything runs, and the server returns the exact SSH command. Nothing runs that command for you yet. When the session ends, control ends with it.1. Register your computerby its tailnet name(Tailscale and SSH on it)2. Enable it for onetailnet sessionthe host must also beapproved as a target3. Pick an actionPowerShell or shell commandfetch a file, screenshotThe attempt is recordedbefore anything runsThe server builds the exactSSH command and returns itNothing runs it for you yetWhen the session ends,control ends with it
The server prepares and records the command, then stops: running it is still your step.
Diagram as text
  1. Register your computer by its tailnet name, not an IP address. It needs Tailscale and an SSH server.
  2. Enable it for one tailnet session. The host must also be approved as a tailnet target; a /goal job cannot approve its own target.
  3. Pick an action: run a PowerShell command, run a shell command, fetch a file or take a screenshot.
  4. The attempt is recorded before anything runs.
  5. The server builds the exact SSH command and returns it. It does not run it; nothing does that for you yet.
  6. When the tailnet session ends, control of the computer ends with it.

Where it stops

The server prepares the command the agent wants to run and records it, and the exact command is returned to you. It does not execute it for you yet. That applies to your own computer only. Opening SSH or a drive to your own ZeroLog container from Windows runs in one click, see Drive and SSH in one click.

Desktop sessionEnds at 02
  1. 01

    Composed

    The agent works out the command it wants to run.

  2. 02

    Shown

    The server returns that exact command and records the attempt.

  3. 03

    Run

    Not done for you. Not yet.

The third compartment is drawn and left empty. That gap is the whole difference between a guided path and a hands-off one.

What it needs

Account access
The Tailscale permission on your account.
Your computer
Tailscale and an SSH server, registered by its tailnet name, not an IP address.
Per session
Control is granted for one tailnet session and ends with it. The host must also be approved as a tailnet target, and a /goal job cannot approve its own.
Actions
Run a PowerShell command (Windows), run a shell command, fetch a file, take a screenshot. Every attempt is recorded before it runs.
A warning
Anything the agent reads can try to instruct it. With desktop control on, such an instruction would run on your machine. Keep the target list short and switch it off when you are done.
Your account
Scoped to your account, like everything else here.

This page is about reaching your own computer from an agent. The native ZeroLog app for your desktop is a different thing: see ZeroLog Desktop.

So guided means what it says: the command gets worked out for you, and running it does not.