x3s.host Docs

Networking & SSH

Public access, Tailscale private networking, and SSH into your agent.

Public URL

Every agent gets a dedicated https:// URL as soon as it's deployed. This is your agent's public address — use it for browser access, API calls, and any integration that needs a stable HTTPS endpoint.

The URL is shown in Access & Credentials inside your agent panel.

Private access with Tailscale

Tailscale gives you a private, encrypted network path directly to your agent. When connected, you can SSH into your agent from your own machine without exposing anything publicly.

Setting up Tailscale

  1. Open your agent and find the Tailscale Network card
  2. Click Connect
  3. If you've saved a Tailscale auth key in your account settings, the connection happens automatically
  4. Otherwise, click the auth link and approve the device in your Tailscale admin panel
  5. Wait for tailscaleIp to appear — this is your agent's private address

SSH to your agent

Once connected:

ssh <username>@<tailscale-ip>
  • Username — from Access & Credentials
  • Password — same password shown in Access & Credentials
  • Port — standard port 22, no -p flag needed

The Tailscale IP is typically in the 100.x.x.x range and is stable as long as the sidecar stays connected.

Disconnecting Tailscale

Click Disconnect in the Tailscale Network card. The sidecar is removed and the Tailscale IP is released. You can reconnect at any time.

Troubleshooting

tailscaleIp not showing after connecting

  • Wait 15–30 seconds and refresh the agent panel
  • If still missing, disconnect and reconnect

SSH connection refused

  • Confirm the agent status is ONLINE
  • Confirm Tailscale is connected and tailscaleIp is visible
  • Make sure you're on your Tailscale network (Tailscale client running on your machine)

Auth link expired

  • Click Get auth link again in the agent panel to generate a fresh one