'%20stroke='url(%23em)'/%3e%3cellipse%20cx='30'%20cy='34'%20rx='26'%20ry='20'%20fill='url(%23gm)'/%3e%3cpath%20d='M12.5%2013.00L52.5%2021.74L52.5%2024.33L12.5%2017.60Z'%20fill='url(%23lm)'/%3e%3crect%20x='14.20'%20y='19.29'%20width='6.60'%20height='28.93'%20rx='1.45'%20fill='url(%23cm0)'/%3e%3crect%20x='27.00'%20y='21.24'%20width='5.60'%20height='24.81'%20rx='1.23'%20fill='url(%23cm1)'/%3e%3crect%20x='37.60'%20y='22.85'%20width='4.70'%20height='21.42'%20rx='1.03'%20fill='url(%23cm2)'/%3e%3crect%20x='46.60'%20y='24.22'%20width='4.00'%20height='18.53'%20rx='0.88'%20fill='url(%23cm3)'/%3e%3cpath%20d='M12.5%2050.00L52.5%2042.57L52.5%2044.26L12.5%2053.00Z'%20fill='%237fa3ff'%20opacity='.75'/%3e%3c/svg%3e)
PorticolLocal agent
The local agent lets the web client send requests from your computer,
so they reach localhost and your private network and use this computer's environment,
keychain secrets, cookies and certificates. It is the desktop app in agent mode, or
porticol-agent on a computer without the desktop app.
When the web client can't find an agent, it says: "Can't reach Porticol on this computer. Turn on agent mode in the Porticol desktop app, or start porticol-agent, then try again."
Turn on agent mode
- In the desktop app, open Settings > Local agent and turn on Agent mode.
- Status shows the address it listens on, such as
127.0.0.1:47615. - Send from the web client. It asks for a pairing code.
- Choose Show pairing code and type the code into the web client.
The code has six digits, works once and lasts five minutes. After five wrong codes it stops working; show a new one. Agent mode stays on across launches until you turn it off, and turning it off closes every connection it holds.
Paired browsers
Settings > Local agent lists each paired browser, with the web client's address and when it was paired. Revoke stops that browser sending through this computer at once; it has to pair again to send.
porticol-agent
On a computer without the desktop app, run the agent on its own:
porticol-agent [--origin <web client URL>]... [--port <port>] [--data-dir <path>]
It prints the address it listens on and a pairing code. Press Enter for a new code, and Ctrl-C to stop it.
--originnames a web client the agent answers, such as your team server's address. Porticol Cloud is answered without it. Repeat it for several.--portlistens on that port alone, rather than the first free one from 47615 to--data-dirkeeps the agent's data, its history and the list of paired browsers, in that folder. Without it, the agent uses a folder namedcom.porticol.agentin your system's application data folder.
What the agent allows
- It listens on this computer's loopback address only, so nothing else on the network can connect to it.
- It answers only a web client: Porticol Cloud, a server this computer has signed in
to, or one named with
--origin. A page whose address points at 127.0.0.1 under a name of its own is refused. - A browser has to pair with a code shown on this computer. The agent keeps only a hash of the token the browser gets, and only accepts it from the address it paired from.
- It sends requests, reads GraphQL schemas, WSDLs and gRPC services, and opens protocol sessions, and nothing else. A browser can't list or change this computer's collections, environments, history, settings or keychain through it.
- Sends are kept in this computer's history, and each browser sees only the sessions it opened.