Skip to main content
Open Settings → Mains Connect → This machine to expose the backend already running in your Mac app. You do not need to start a separate server process.

​
Choose an access path

Network access (LAN) appears after remote access is enabled. Tailscale HTTPS requires Tailscale and HTTPS setup on your tailnet. Keep Mains running and the machine awake. The app’s remote-access keep-awake option can keep the host available. For operation without Desktop, use Server.

​
Pair a phone

1

Enable a reachable address

Turn on LAN access or Tailscale HTTPS. Loopback-only access cannot be reached by a phone.
2

Show the pairing code

Under Devices, choose Show pairing code. The QR is single-use and expires after five minutes.
3

Scan from the phone

Open the companion’s pairing screen and scan the QR. The phone receives its own device token.
Production mobile builds require a secure endpoint such as Tailscale HTTPS. Development or preview builds can permit plain LAN traffic.

​
Browser login

Use the address’s browser-login copy control to create a one-use login link. Open it in the browser that will connect to this backend. The login code expires after five minutes. The browser exchanges it for session cookies; the owner token is not placed in the login URL.

​
Manage access

The Devices section lists paired devices. Rename one for identification or Revoke it to disconnect and prevent reuse of its token. Rotate token replaces the owner token and disconnects clients and browser sessions using current owner access. Paired devices have their own tokens and can reconnect. Keep the owner token private. Use pairing or browser login instead of sharing it with those clients. See Privacy for storage and transport details.