airmsh01 / DEVICE TO DEVICE
Connect your devices.
Reach your phone, laptop, or server over an encrypted connection. Go direct when possible; stay connected through a relay when needed.
Explore device connectionsZero Trust Network
IN PRACTICE
See what your network can do.
Five ways to connect and share. You choose which ones to use.
02 / ZERO-TRUST NETWORK
Open only what you allow.
Give approved people a private Endpoint for one internal website, Web API, database, or tool. Set access by user, group, or device. Other services stay private.
Explore scoped access03 / AIRFS · PREVIEW
Storage for your whole team.
Choose a drive size that fits your storage plan. Give multiple people folder-level access.
Explore AirFS04 / PUBLIC LINKS
Share outside, by choice.
Give one local web service a public HTTPS link for a demo or callback. Public sharing is separate from your private network and can be turned off.
Explore public links05 / TRUSTED AGENTS
Agents that know who they are talking to.
Connect named agents across devices. Each request is checked so the right agent can do only what you allow.
Explore trusted agentsGET STARTED
Three steps. One network.
YOUR SETUPSTEP 01 / 03
Start with the devices you use.
Download Airmsh for your computer or phone. Installing on a Linux server? The CLI installer can keep it running for you.
FAQ
Common questions.
Using Airmsh
Where do I start?
Install Airmsh on your devices, sign in, and turn on your private network. Add Endpoints, drives, or agents only when you need them.
What if my devices cannot connect directly?
Airmsh can use a relay as a fallback. Both devices still need to be online and authorized to connect.
How do I share an internal service?
Create an Endpoint for that service, then choose which users, groups, or devices may reach it. Other services stay private.
Can my team share the same drive?
Yes. AirFS lets you give multiple people folder-level access to a shared drive. Check the setup guide for current preview availability.
Can agents work across devices?
Yes. Name the agent on its destination device and allow the specific devices, actions, and resources it may use.
Can I use Airmsh on my phone?
Yes. Install it through the App Store or Google Play, then allow the system VPN permission when asked. Check your installed version for feature availability.
How do I invite a teammate?
Each person uses their own Airmsh account. Invite them in People & access, then grant access to the specific Endpoint or AirFS folder they need.
Why will my Endpoint not open?
Check that its server is online, Endpoint access is connected, and you copied the full name and port from Endpoints. Then check the service on the server.
Security & access
Is my network public?
No. Your devices connect in a private network with identity and access checks. Public links are optional and separate from that network.
Does an Endpoint expose my whole server?
No. An Endpoint opens one selected service. It does not open other ports, Terminal, Files, or an entire subnet.
Can I choose who reaches an Endpoint?
Yes. Allow the specific users, groups, or devices that need the service. Other access stays closed.
Does sharing a drive expose my other files?
No. Drive and folder access are separate from Terminal and other files on the owner’s device.
Can I turn off a public link?
Yes. Public links are separate from the private network and can be disabled or deleted.
What happens when I remove access?
New Endpoint connections should be blocked. Drive access changes may take a short time to expire, and files already copied cannot be recalled.
How is a remote agent identified?
The destination checks the authenticated source device, target device ID, and agent tag. A network address alone is not accepted as identity.
Do remote agents receive database passwords?
No. Remote callers send requests; database passwords and MCP tokens stay on the destination device for local authentication.