Docs
How WingGate Works Getting Started The big picture: your clients, the WingGate service, and the wing-connector inside your own network — what each component does and what it means for you. Bind a Browser Getting Started Turn a logged-in browser on your own machine into a managed browser asset — install the WingGate browser extension, complete device-code binding, and give AI agents scoped browser tools. Using the Web Console Web Console Navigate the WingGate web console to manage Organizations, Projects, members, assets, credentials and audit from the browser. Working in the Web Terminal Web Terminal Open browser-based terminal sessions on WingGate-managed assets, understand session modes and lifecycle, and use the file tree and Git views. Connecting with Your SSH Client SSH Client Register an SSH public key and connect to WingGate-managed assets with your own SSH client through WingGate's SSH endpoint. Working with Files File Access Understand WingGate's file access over the Web Terminal and MCP, the zero-install SFTP boundary on SSH assets, the SMB / WebDAV / S3 file backends, and which search operations require the Runner. Setting Up MCP Access MCP Create a Project MCP credential and connect an external MCP client to WingGate's scoped file, command, and browser capabilities. Teams, Organizations and Projects Teams and Projects Organize members, Organizations and Projects, understand the fixed Owner/Admin/Member role matrix, and grant data-plane access with Project access grants. connector Deployment connector Deployment How the wing-connector works: architecture, deployment topologies, network requirements, access paths, installation and upgrade boundaries, and layered troubleshooting. Connection model Security How WingGate reaches your assets — the service/connector responsibility split, the outbound-only mTLS transport, and the optional SSH Direct listener. Identity and access Security Sign-in methods, isolation between identity and asset credentials, the Organization / Project / Grant authorization chain, and what each access method can do. Credential protection Security How asset secrets stay out of API responses, logs and errors, how they are encrypted at rest, and how SSH host keys and the file backends' identity anchors are verified. Audit and evidence Security What the append-only audit trail records, what it contractually excludes, and where to find the evidence for every session and grant change. Audit and Troubleshooting Audit and Troubleshooting Query the WingGate audit trail, understand what is recorded and what stays out, and work through common connection failures. API and Protocol Reference API / Protocol Reference Orient yourself in WingGate's SSH gateway and MCP protocol surfaces: what exists, how authentication works, and where the boundaries are.