Skip to main content
Arrange human takeover for computer use agents by sharing a view-only desktop link or ask a human to take control. Watch grants and human controller sessions have separate authority.
Watch links default to ten minutes and permit at most one hour. They disable keyboard, pointer, and clipboard input. Keep links private: possession grants desktop viewing. Revoke a grant using its returned UUID:
Link tokens travel in URL fragments and are exchanged before streaming. Do not copy them into logs, query strings, or analytics.

​
Request human help

Keep secrets out of the reason. The request appears in the dashboard and can emit desktop.takeover.requested to registered webhooks. The returned invitation expires after two minutes and can be exchanged once.

​
Take control and hand back

The human chooses Take control. Private control is the default: other viewers see a privacy screen and managed agent observation is blocked. Demonstration explicitly permits observation. Clipboard paste needs a separate opt-in and sends text only into the machine. Acquiring control fences new managed work and waits for managed processes and observations to pause. Unmanaged external agents must cooperate; takeover does not undo JavaScript or already-submitted remote work. The human returns Done, Failed, or Skip, with an optional non-secret note. Clear sensitive UI before returning control. Agent work resumes only after handback is acknowledged.

​
Inspect recovery

Poll bead desktop status ID for the outcome and control return. A disconnect keeps the agent paused for a 15-second reconnect grace. Uncertain control can remain blocked_for_recovery; do not continue agent input in that state. Redeemed human sessions are bounded to one hour with a renewable control lease. Pause, resume, snapshot, and delete retire old links and control. A fork receives no watch grants or human lease. See desktop use and events.