Pair code
A 4-character base32 code used to pair the user's laptop (running Claude Code) with their Ajeris account. The agent can then forward shell commands to the laptop and report back.
Why it matters
Pairing a laptop to an agent is a security-sensitive operation. The pairing has to be quick (low friction for the user) and verifiable (the laptop is actually the user's). A short code is the standard solution: the agent generates a code; the user enters it at the laptop's CLI; the laptop and agent perform a key exchange.
A 4-character base32 code is short enough to type without errors and long enough to resist brute-force attempts within the 5-minute expiry window. Once paired, the device-specific token is stored locally on the laptop and used for authenticated communication.
How Ajeris handles this
Pair codes are generated on user request ('pair my laptop with claude code'). The code expires in 5 minutes. The user enters it at their laptop's ajeris connect claude-code CLI prompt; the laptop daemon establishes a WebSocket connection to the gateway and authenticates. After successful pairing, the device-specific token is stored encrypted (e.g. macOS keychain, Windows credential store). Revoking pairing is one command and tears down the auth immediately.
