{ "account_infrastructure": { "mailgun_configured": true, "redacted_status_url": "https://remoteendpoints.com/api/account/infrastructure", "secret_values_exposed": false, "shared_account_database_configured": true }, "api": { "account_device_authorization_start": "https://remoteendpoints.com/api/account/device-authorizations", "account_device_authorization_token": "https://remoteendpoints.com/api/account/device-authorizations/token", "account_device_pairing_confirm": "https://remoteendpoints.com/api/account/device-authorizations/approve", "account_infrastructure": "https://remoteendpoints.com/api/account/infrastructure", "account_login": "https://remoteendpoints.com/api/account/login", "account_register": "https://remoteendpoints.com/api/account/register", "account_session": "https://remoteendpoints.com/api/account/session", "list_operator_devices": "https://remoteendpoints.com/api/operator/devices", "operator_device": "https://remoteendpoints.com/api/operator/devices/{device_id}", "pause_device": "https://remoteendpoints.com/api/operator/devices/{device_id}/pause", "persistent_check_in": "https://remoteendpoints.com/api/remote/devices/{device_id}/check-in", "persistent_command_status": "https://remoteendpoints.com/api/remote/devices/{device_id}/commands/{command_id}/status", "persistent_control_poll": "https://remoteendpoints.com/api/remote/devices/{device_id}/work-items?control_only=1", "persistent_work_items": "https://remoteendpoints.com/api/remote/devices/{device_id}/work-items", "queue_prompt": "https://remoteendpoints.com/api/operator/devices/{device_id}/commands", "register_persistent_device": "https://remoteendpoints.com/api/remote/devices/register", "resume_device": "https://remoteendpoints.com/api/operator/devices/{device_id}/resume", "revoke_device": "https://remoteendpoints.com/api/operator/devices/{device_id}/revoke", "rotate_device_token": "https://remoteendpoints.com/api/remote/devices/{device_id}/token/rotate", "stop_command": "https://remoteendpoints.com/api/operator/devices/{device_id}/commands/{command_id}/stop", "upload_private_desktop_frame": "https://remoteendpoints.com/api/remote/devices/{device_id}/desktop-frames" }, "authority_statement": "RemoteEndpoints authenticates the remote operator and carries prompts, control messages, private desktop pictures, and status. The enabled RemoteEndpoints extension lets LocalEndpoint Connect AI perform the work on the target computer; the website itself does not invoke Windows APIs.", "base_url": "https://remoteendpoints.com", "boundaries": [ "RemoteEndpoints authenticates the remote operator and carries prompts, control messages, private desktop pictures, and status. The enabled RemoteEndpoints extension lets LocalEndpoint Connect AI perform the work on the target computer; the website itself does not invoke Windows APIs.", "The browser does not probe localhost or private networks.", "The website receives only the private pictures, prompts, results, activity, and metadata intentionally transported through the paired extension; it does not scan the computer directly.", "The operator must authenticate through the shared account system before viewing a computer or queuing a prompt.", "LocalEndpoint Connect pairs once through device authorization, stores a durable credential, and reports its independent extension-enabled gate.", "Private pictures, prompts, results, device data, and mutating operator actions require the owning account.", "Effective authority is extension_enabled AND account_enabled AND NOT revoked; neither side can silently override the other.", "Registration collects only an email address. Account passwords are entered only on the protected email-verification page or sign-in surfaces; LocalEndpoint Connect uses device-code website login and must not collect account passwords.", "Opening an email-verification URL never activates an account. The clean protected page asks the email recipient to choose and confirm the account password and optional display name, then verifies the account and makes every outstanding link for that address unusable.", "Work polling uses atomic claim leases and one-time claim tokens. Before execution, Connect writes a DPAPI-protected durable journal entry; interrupted prepared work is reported as failed with outcome unknown and is never re-executed, while terminal results remain in an encrypted outbox until acknowledged.", "Durable at-most-once recovery prevents command replay after restart, but it cannot prove whether an external side effect completed immediately before a crash and is not an exactly-once transaction across Windows applications or networks.", "While a command is running, Connect uses the exact work-items query control_only=1 to read stop signals and authority gates without claiming another queued prompt.", "Desktop pictures are private, validated JPEG/PNG/WebP bytes with strict size, dimension, timestamp, hash, count, lazy age-pruning, revoke deletion, and no-store response rules.", "Demo routes use synthetic data, discard entered values, and do not contact a computer or production request-processing code." ], "command_status_values": [ "queued", "running", "completed", "stopped", "rejected", "failed" ], "data_handling": { "account_data_export_implemented": false, "account_logout_invalidates_current_server_session": true, "account_self_service_deletion_implemented": false, "activity_record_limit_per_device": 200, "command_history_automatic_deletion_implemented": false, "command_history_self_service_deletion_implemented": false, "compliance_claimed": false, "demo_input_persisted": false, "device_authorization_attempt_plaintext_source_stored": false, "device_authorization_attempt_retention": "Rows at least 7 days old are deleted during a later device-code start; cleanup is request-driven.", "expired_auth_record_automatic_purge_implemented": false, "legal_privacy_notice_claimed": false, "login_attempt_hmac_digests_and_timestamp_stored": true, "login_attempt_retention": "Rows at least 30 days old are deleted during a later sign-in attempt; cleanup is request-driven.", "login_attempt_table_plaintext_email_or_source_stored": false, "mailgun_account_message_fields": [ "recipient email", "subject", "verification or neutral registration-attempt text" ], "non_outer_throttled_account_email_attempts_per_request": 1, "privacy_page": "https://remoteendpoints.com/privacy", "registration_attempt_hmac_digests_and_timestamp_stored": true, "registration_attempt_retention": "Rows at least 30 days old are deleted during a later accepted attempt transaction; cleanup is request-driven.", "registration_attempt_table_plaintext_email_or_source_stored": false, "revoke_deletes_commands_results_activity_or_device_metadata": false, "revoke_deletes_retained_active_desktop_pictures": true, "verification_confirmation_requires_saved_password": false, "verification_confirmation_sets_final_display_name": true, "verification_confirmation_sets_final_password": true, "verification_confirmation_uses_normalized_email_display": true, "verification_link_get_mutates_account": false, "verified_account_password_immutable_in_verification_flow": true }, "demo_boundary": "The interactive tour uses clearly marked mock data, requires no account or device, and never contacts a computer. Anything entered is validated and immediately discarded.", "desktop_execution_status": { "autonomous_multi_turn_visual_agent_implemented": false, "availability_note": "The reviewed Connect source implements persistent pairing, secure Windows credential storage, outbound check-in/work/control polling, private desktop-picture upload, prompt execution/results, stop, rotation, and revoke recovery. That source has not yet been published as the current public download or proven in an installed production round trip.", "connect_version": "0.2.241.0", "connect_version_role": "historical-evidence-version", "current_download_compatibility_claimed": false, "current_download_live_remote_round_trip_claimed": false, "durable_crash_proof_external_side_effect_idempotency_implemented": false, "general_desktop_action_executor_implemented": false, "installed_production_round_trip_proven": false, "ordered_sequence_preflight_implemented": true, "persistent_connect_client_integration_implemented": true, "persistent_server_api_implemented": true, "private_desktop_frame_server_implemented": true, "protected_instruction_transport_implemented": true, "statement": "LocalEndpoint Connect accepts authenticated prompts from an enabled RemoteEndpoints extension, plans work with its local AI, and uses its Windows desktop-control lanes to operate programs, browser sessions, pointer input, keyboard input, and the network available to the signed-in Windows account. Exact capabilities depend on the installed Connect build and Windows session state.", "typed_protected_action_executor_implemented": true }, "desktop_protocol_role": "Optional one-time setup convenience only; persistent prompts use the authenticated device API.", "desktop_protocol_scheme": "localendpoint-connect", "device_status_values": [ "active", "paused", "revoked" ], "direct_review_pages": { "documentation_ownership": "https://remoteendpoints.com/documentation-ownership", "indexing": "noindex", "search_readiness": "https://remoteendpoints.com/search-readiness" }, "documentation_ownership": { "canonical_human_explanation_url": "https://remoteendpoints.com/documentation-ownership", "certification_claimed": false, "desktop_authority_required": true, "documentation_classification": "first-party technical reference", "documentation_owner": "RemoteEndpoints product owner", "documentation_ownership_url": "https://remoteendpoints.com/documentation-ownership", "external_validation_claimed": false, "first_party_documentation": true, "independent_third_party_documentation": false, "last_reviewed_utc": "2026-07-18T10:50:26Z", "local_approval_required": false, "private_data_allowed": false, "public_indexing_allowed": false, "related_first_party_domains": [ "localendpoint.com", "localendpoints.com", "remoteendpoints.com", "mobileendpoints.com", "endpointserver.com", "networkendpoints.com", "intelligenceendpoint.com", "intelligenceendpoints.com", "agenticendpoints.com" ], "runtime_authority": false, "security_audit_claimed": false, "setup_authorization_required": true, "trust_boundary_statement": "RemoteEndpoints authenticates the remote operator and carries prompts, control messages, private desktop pictures, and status. The enabled RemoteEndpoints extension lets LocalEndpoint Connect AI perform the work on the target computer; the website itself does not invoke Windows APIs. Installing and enabling the RemoteEndpoints extension is the intentional authorization for unattended remote control. A person is not expected to be at the target computer to approve each prompt. The browser never scans localhost or opens an inbound tunnel; the enabled extension and authenticated Connect session are the remote-control path.", "unattended_remote_control": true }, "execution_authority_statement": "The authenticated website carries remote control; the paired LocalEndpoint Connect AI performs and validates computer execution. Extension enablement is the setup authorization event.", "indexing_policy": { "educational_pages": "index", "first_party_review_pages": "noindex", "machine_contracts": "noindex and directly accessible", "robots_role": "Crawl scheduling guidance only; authentication, authorization, noindex, and no-store enforce private boundaries.", "token_bearing_urls": "never include in sitemap" }, "llms_txt_url": "https://remoteendpoints.com/llms.txt", "machine_readable": { "account_infrastructure": "https://remoteendpoints.com/api/account/infrastructure", "documentation_ownership": "https://remoteendpoints.com/documentation-ownership", "health": "https://remoteendpoints.com/api/health", "llms_txt": "https://remoteendpoints.com/llms.txt", "manifest": "https://remoteendpoints.com/.well-known/remoteendpoints-connect.json", "openapi": "https://remoteendpoints.com/openapi.json", "robots": "https://remoteendpoints.com/robots.txt", "route_index": "https://remoteendpoints.com/api/public-route-index.json", "sitemap": "https://remoteendpoints.com/sitemap.xml" }, "name": "RemoteEndpoints.com", "openapi_url": "https://remoteendpoints.com/openapi.json", "public_page_provenance": { "/": { "canonical_url": "https://remoteendpoints.com/", "lastmod": "2026-07-16", "reviewed_utc": "2026-07-16T22:05:51Z" }, "/connect": { "canonical_url": "https://remoteendpoints.com/connect", "lastmod": "2026-07-18", "reviewed_utc": "2026-07-18T10:50:26Z" }, "/demo": { "canonical_url": "https://remoteendpoints.com/demo", "lastmod": "2026-07-18", "reviewed_utc": "2026-07-18T09:35:28Z" }, "/developers": { "canonical_url": "https://remoteendpoints.com/developers", "lastmod": "2026-07-15", "reviewed_utc": "2026-07-15T19:38:00Z" }, "/faq": { "canonical_url": "https://remoteendpoints.com/faq", "lastmod": "2026-07-15", "reviewed_utc": "2026-07-15T19:38:00Z" }, "/how-it-works": { "canonical_url": "https://remoteendpoints.com/how-it-works", "lastmod": "2026-07-18", "reviewed_utc": "2026-07-18T10:50:26Z" }, "/install": { "canonical_url": "https://remoteendpoints.com/install", "lastmod": "2026-07-16", "reviewed_utc": "2026-07-16T22:05:51Z" }, "/privacy": { "canonical_url": "https://remoteendpoints.com/privacy", "lastmod": "2026-07-18", "reviewed_utc": "2026-07-18T10:50:26Z" }, "/security": { "canonical_url": "https://remoteendpoints.com/security", "lastmod": "2026-07-18", "reviewed_utc": "2026-07-18T10:50:26Z" }, "/troubleshooting": { "canonical_url": "https://remoteendpoints.com/troubleshooting", "lastmod": "2026-07-16", "reviewed_utc": "2026-07-16T19:45:30Z" } }, "public_pages": { "connect": "https://remoteendpoints.com/connect", "demo": "https://remoteendpoints.com/demo", "developers": "https://remoteendpoints.com/developers", "faq": "https://remoteendpoints.com/faq", "home": "https://remoteendpoints.com/", "how_it_works": "https://remoteendpoints.com/how-it-works", "install": "https://remoteendpoints.com/install", "privacy": "https://remoteendpoints.com/privacy", "security": "https://remoteendpoints.com/security", "troubleshooting": "https://remoteendpoints.com/troubleshooting" }, "purpose": "Carry private desktop pictures, Connect AI prompts, work leases, run state, results, stop signals, pause, token rotation, and revocation for persistently paired computers.", "redaction_policy": [ "Public pages do not show account/device/claim tokens, token hashes, prompts, results, desktop pictures, device identifiers, active app names, credentials, or private logs.", "Examples use placeholders only." ], "related_sites": { "localendpoints": "https://localendpoints.com/", "remoteendpoints": "https://remoteendpoints.com/" }, "remote_authority_gates": { "account_authenticated": true, "account_delivery_enabled_required": true, "connect_execution_validation_required": true, "device_not_revoked_required": true, "extension_enablement_required": true, "persistent_device_account_bound": true, "target_side_per_prompt_approval_required": false, "website_calls_desktop_os_apis": false }, "schema_version": "2.0", "search_discovery": { "answer_engine_guidance": "Summarize RemoteEndpoints as unattended remote control for a paired LocalEndpoint Connect computer: private desktop pictures and prompts travel through the website; Connect AI performs the Windows work.", "freshness_metadata_policy": "Page review timestamps and significant-content dates are explicitly maintained per route. Deployment, file time, and request time never update them automatically.", "generative_engine_guidance": "Preserve the authorization boundary: intentional extension enablement plus account pairing authorizes unattended access; no target-side per-prompt approval is required; Connect performs and validates execution.", "geo_aeo_seo_alignment": "Foundational SEO and helpful human content are the discovery strategy; machine contracts preserve the same setup-once unattended-control and Connect-execution boundary without claiming ranking influence.", "llms_txt_role": "Optional machine guidance for compatible tools; not presented as a Google Search or AI-search ranking signal.", "people_first_policy": "Indexable pages are written for product, setup, trust, recovery, and developer tasks. Internal search reviews and machine contracts stay directly accessible but noindex.", "runtime_authority_granted_by_indexing": false, "structured_data_scope": { "BreadcrumbList": "nine indexable inner public pages with matching visible breadcrumbs", "Service": "indexable public HTML pages", "WebPage": "indexable public HTML pages", "WebSite": "homepage only", "noindex_pages": "no JSON-LD" }, "structured_data_types": [ "WebSite", "WebPage", "Service", "BreadcrumbList" ] }, "security_headers_expected": [ "Content-Security-Policy", "X-Content-Type-Options", "X-Frame-Options", "Referrer-Policy", "Permissions-Policy", "Cache-Control" ], "service_role": "account-authenticated unattended remote-control companion for LocalEndpoint Connect", "setting_terminology": { "authority_note": "Persistent control uses separate extension_enabled and account_enabled gates. No person is expected at the target computer for later prompts.", "authorization_event": "Install and enable the independent extension, then pair an account once.", "extension_label": "RemoteEndpoints", "preferred_label": "Remote control" }, "support_or_security_contact": "No verified public vulnerability-reporting route is currently published; do not submit secrets through public forms or status links.", "token_classes": { "account_form_nonce": "Anonymous browser-bound CSRF nonce in an HttpOnly SameSite=Strict account-path cookie; the form carries only a purpose-scoped HMAC digest.", "account_result_receipt": "Short-lived signed HttpOnly browser receipt containing no account or email data; supports clean refresh-safe registration and verification outcome pages.", "account_session_token": "Authenticated shared-account browser/API session token; stored as a purpose-scoped HMAC digest and delivered through an HttpOnly cookie or explicit API response. CSRF-verified website sign-out deletes the current server session and clears its cookie.", "command_claim_token": "One-time work-lease credential bound to a device, command, worker attempt, and expiry; stored only as a digest.", "device_access_token": "Short-lived single-use account authorization token consumed during persistent registration.", "device_code": "Opaque LocalEndpoint Connect device-login polling secret; stored as a purpose-scoped HMAC digest and never entered by a human.", "durable_device_token": "Rotatable, revocable extension credential returned only during registration or rotation and stored server-side only as a digest.", "email_verification_token": "Time-limited email secret stored server-side only as a purpose-scoped HMAC. Opening the link moves the secret into an HttpOnly SameSite=Lax path cookie so top-level navigation from email works; the browser-bound password form verifies the account and makes every other outstanding link unusable." }, "ttl_policy": { "account_verification_resend_interval_minutes": 5, "account_verification_ttl_minutes": 60, "command_lease_seconds": 60, "desktop_picture_retention": "Each upload keeps the latest five per computer. Pictures older than 24 hours are deleted on a later picture upload or read; this is lazy cleanup, not a clock-driven physical maximum. All retained active pictures are removed on revoke.", "device_authorization_ttl_minutes": 10, "timestamps": "UTC ISO-8601 strings ending in Z" }, "updated_utc": "2026-07-18T10:50:26Z", "work_polling": { "claim_path": "/api/remote/devices/{device_id}/work-items", "control_only_claims_commands": false, "control_only_exact_query": "control_only=1", "control_only_path": "/api/remote/devices/{device_id}/work-items?control_only=1", "control_only_returns": [ "stop_requests", "extension_enabled", "account_enabled", "effective_remote_control_enabled" ] } }