Belong AI Deploy
Private Access
Reach your agent's dashboard securely over a private Tailscale network — never the public internet.
Private Access
Belong AI Deploy puts your dashboard and agent on a private network using Tailscale. Only your own devices can reach them — no one else on the internet can.
What is Tailscale?
Tailscale is a modern VPN that connects your devices in a private network. It's free for personal use and takes about a minute to set up.
Setup steps
1. Create a Tailscale account
- Go to login.tailscale.com/start
- Sign up with Google, Microsoft, GitHub, or email
- It's free for personal use (up to 100 devices)
2. Generate an auth key
The wizard needs an auth key to connect your agent's server to your Tailscale network.
- Go to login.tailscale.com/admin/settings/keys
- Click Generate auth key
- Settings:
- Reusable: Yes
- Ephemeral: No
- Expiration: the default is fine
- Copy the key (starts with
tskey-auth-)
3. Paste in the wizard
- Paste the auth key in the wizard's private-network screen
- Click Verify
- You'll see Private network ready
4. Install Tailscale on your devices
After deployment, install Tailscale on any device where you want to access your dashboard:
- iPhone / iPad — App Store
- Android — Google Play
- Mac — Mac App Store
- Windows — tailscale.com/download
- Linux —
curl -fsSL https://tailscale.com/install.sh | sh
5. Access your dashboard
- Open Tailscale on your device and sign in with the same account
- In your browser, go to
http://YOUR_TAILSCALE_IP:3000 - That's your management dashboard.
How it works
- Your agent's server gets a Tailscale IP (like
100.64.x.x); your devices get one too - They communicate directly, as if on the same local network
- No ports need to be opened to the public internet for the dashboard, SSH, or agent traffic
- The agent's gateway ports stay private unless you intentionally add a separate HTTPS entrypoint
- If you use Telegram, WhatsApp, or Slack webhooks, those route through one shared HTTPS entrypoint — never your app ports directly
Security
- Dashboard access is limited to devices on your Tailscale network
- Gateway and agent ports stay private on the server
- Any public webhook ingress is optional and should be a single HTTPS entrypoint you control
- All Tailscale traffic is encrypted end-to-end