Distributed Collaboration

Wingman Gateway lets you run a shared agent hub across devices.

Scenario: Shared gateway + remote node

  1. Start the gateway on a server:
wingman gateway start --discovery mdns --name "Studio Gateway"
  1. Discover from another machine:
wingman gateway discover --verbose
  1. Join as a node:
wingman gateway join ws://server:18789/ws --name "laptop-node"
  1. Invoke agents through the shared gateway:
wingman agent --agent main --gateway ws://server:18789/ws "Summarize today's incidents"

Auth + Tailscale

If you enable token or password auth, you can still allow trusted Tailscale users to connect without tokens:

{
  "gateway": {
    "auth": {
      "mode": "token",
      "token": "...",
      "allowTailscale": true
    }
  }
}

SSH tunnel fallback

When direct access is blocked, you can tunnel:

wingman gateway tunnel user@remote-host --name "tunnel-node"

Best practices

  • Use discovery only on trusted networks.
  • Restrict fsRoots to safe directories.
  • Prefer token auth when exposing the gateway.