Belong.net Logo
Belong AI Deploy

Private Access

Reach your agent's dashboard securely over a private Tailscale network — never the public internet.

Private Access

Belong AI Deploy puts your dashboard and agent on a private network using Tailscale. Only your own devices can reach them — no one else on the internet can.

What is Tailscale?

Tailscale is a modern VPN that connects your devices in a private network. It's free for personal use and takes about a minute to set up.

Setup steps

1. Create a Tailscale account

  1. Go to login.tailscale.com/start
  2. Sign up with Google, Microsoft, GitHub, or email
  3. It's free for personal use (up to 100 devices)

2. Generate an auth key

The wizard needs an auth key to connect your agent's server to your Tailscale network.

  1. Go to login.tailscale.com/admin/settings/keys
  2. Click Generate auth key
  3. Settings:
    • Reusable: Yes
    • Ephemeral: No
    • Expiration: the default is fine
  4. Copy the key (starts with tskey-auth-)

3. Paste in the wizard

  1. Paste the auth key in the wizard's private-network screen
  2. Click Verify
  3. You'll see Private network ready

4. Install Tailscale on your devices

After deployment, install Tailscale on any device where you want to access your dashboard:

5. Access your dashboard

  1. Open Tailscale on your device and sign in with the same account
  2. In your browser, go to http://YOUR_TAILSCALE_IP:3000
  3. That's your management dashboard.

How it works

  • Your agent's server gets a Tailscale IP (like 100.64.x.x); your devices get one too
  • They communicate directly, as if on the same local network
  • No ports need to be opened to the public internet for the dashboard, SSH, or agent traffic
  • The agent's gateway ports stay private unless you intentionally add a separate HTTPS entrypoint
  • If you use Telegram, WhatsApp, or Slack webhooks, those route through one shared HTTPS entrypoint — never your app ports directly

Security

  • Dashboard access is limited to devices on your Tailscale network
  • Gateway and agent ports stay private on the server
  • Any public webhook ingress is optional and should be a single HTTPS entrypoint you control
  • All Tailscale traffic is encrypted end-to-end
Copyright © 2026