Connecting a provider adds
another way into this account. It does not create a second one — that only happens
if you use a provider while signed out and it has never been connected here.
Devices
—
You can release any of
these from here, including a machine you no longer have. A device signed in on its own can
only release itself — that is deliberate, so a stolen machine cannot cut off the
others.
Enrolment tokens
For machines that cannot open a browser — build
agents, servers, a fleet. Not enabled in this release: the server refuses token
enrolment, and the command answers that headless activation is not enabled. Every device is
activated through a browser today.
Tokens are issued here and
nowhere else. veizik token issue refuses, because a device that
could mint one could enrol more devices after being stolen.
A token enrols whatever machine
presents it. Unlike approving at /activate, nothing proves that the
machine using the token is the one you meant — so treat a token like a key to a door,
give each machine its own, and release it here when the machine is gone.