Included with Single User & Teams

Access Your Dev Machine
From Anywhere

AidaIDE Cloud Portal opens a secure reverse tunnel from your desktop to a hosted gateway — no port forwarding, no VPN, no static IP. Access your full IDE from any browser.

Get AidaIDE Open Portal
No port forwarding RBAC access control Guest passes mTLS encrypted Idle-kick protection
AidaIDE Cloud Portal — Settings
$_ cloud-portal enable
↳ Generating device certificate (ECDSA P-256)...
↳ Enrolling with portal API...
✓ Device enrolled — fingerprint: a3f8:c21b:9d04
↳ Opening WebSocket tunnel to gateway...
✓ Tunnel active
$_ cloud-portal status
Portal URL: https://api.aidaide.app/webportal/d/<your-device>/
Status: ● connected
Guests: 1 / 1 slot active
Uptime: 2h 14m

Three steps to remote access

No infrastructure to manage. Enable the tunnel in Settings, share the link, done.

1

Enable in Settings

Open AidaIDE → Settings → Cloud Portal. One click starts the enrollment and opens the reverse tunnel from your machine to the hosted gateway.

2

Invite collaborators

From your portal dashboard at aidaide.app/dashboard, add collaborators by email and assign them a permission group. They need an AidaIDE account — nothing else.

3

Work from anywhere

Collaborators open the portal in their browser. All traffic flows through the encrypted tunnel. You stay in control — approve or deny sensitive actions in real time.

Everything you need, nothing you don't

Cloud Portal ships with enterprise-grade access control baked in — no plugins, no config files.

RBAC Access Control

Four built-in permission groups — Owner, Trusted, Collaborator, Read-Only. Every action (file reads, writes, shell, terminal) maps to Allow, Deny, or Prompt-host. Fully customisable.

Guest Passes

Give external collaborators temporary access without a paid seat. Single User includes 1 concurrent slot; Teams includes 5. Add more at $12/yr each.

Prompt-Host Approval

Sensitive operations — file writes, terminal interaction, project changes — can be set to require your live approval before execution. You see the request; you decide.

Audit Log

Every action taken through the portal is logged with timestamp, actor, and outcome. Stored on your device, retained for 365 days by default.

Idle-Kick Protection

Guests who go idle are warned at 4 minutes and automatically disconnected after 30 more seconds. No lingering open sessions when nobody's actively working.

mTLS + Zero Trust

Your device is issued a unique ECDSA P-256 certificate on enrollment. Every tunnel connection is mutually authenticated — no shared secrets, no static credentials.

You control exactly what each collaborator can do

Every device gets four built-in groups. Assign collaborators to a group and the permissions enforce themselves — no scripting required.

  • Owner — full access, all capabilities allowed. Cannot be edited or removed.
  • Trusted — full non-admin access. Cannot change groups or settings.
  • Collaborator — reads free; writes and terminal require your live approval.
  • Read-Only — view files, terminal output, project config. No writes, no shell.
  • Create custom groups with per-capability overrides.
Owner Built-in
All allow
Trusted
file.read file.write shell
Collaborator
file.read file.write shell
Read-Only
file.read file.write shell
Custom group — configure any capability

Included with every plan.
Guest passes from $12/yr.

Cloud Portal is not an add-on. Every Single User and Teams license includes it. Pay only if you need extra concurrent guest slots.

Need more guest slots?
Guest Pass Add-on
$12 / yr per additional slot
Get AidaIDE Open My Portal

Your IDE. Anywhere. Secure.

Start with a single user license at $7/mo. Cloud Portal is on. No extra steps.

Get AidaIDE — from $7/mo