Device Pairing Protocol
Cryptographic mutual authentication without transmitting sensitive hardware serial numbers or IP addresses.
FineTuneMyAI connects your browser control plane to your local compute node using an ephemeral, 6-digit one-time code.
Pairing Lifecycle
1. Request Code
The web dashboard generates an ephemeral 6-digit number valid for 10 minutes stored with a cryptographic bcrypt hash.
2. Agent Key Generation
The local agent creates a cryptographic shared secret and HMAC credential in secure local OS storage.
3. Claiming the Session
The agent submits the code and device capability profile to the cloud API over TLS via POST /api/v1/pairing/claim.
4. Token Issuance
The server verifies the code, assigns an anonymous opaque ID (dev_*), and immediately destroys the pairing session.