Windows installer
Code-signedThe Windows installer is signed with Azure Trusted Signing, so you can check the publisher name in the signature before installing.
Security & transparency
Security and Privacy
The Local Agent runs on your own computer. This page explains what it is allowed to do, what stays local by default, how releases are verified, and how your data is handled.
Private Alpha
Version 2.0 · Build 205
The Local Agent
What the Agent does on your computer
The Agent is the part of AnxOS that touches your machine: processes, files, dependencies, backups, and networking tools. These are the rules it is built around.
- Runs on your computerThe Local Agent runs on your own computer. It connects AnxOS Control Center to local server processes, files, dependencies, backups, and networking tools that you select.
- Requested actions onlyThe Agent is intended to perform actions requested through AnxOS, such as starting a server, editing an instance file, creating a backup, or installing a selected dependency.
- Automatic local pairingLocal pairing is configured automatically for This PC. Normal setup never asks you to copy Agent tokens or edit configuration files.
- Remote access is opt-inRemote access is not enabled by default. Public Access choices such as Playit, Tailscale, Cloudflare Tunnel, and router port forwarding are steps you take on purpose, with their own accounts and firewall rules.
- Sanitized diagnosticsLogs and diagnostics are designed to sanitize secrets before display or export. Sensitive values appear as fingerprints instead of full credential values.
- You stay in controlYou can stop the Local Agent service or uninstall the Agent. Your instances, worlds, and backups stay on disk unless an uninstall option explicitly removes them.
Advanced setup keeps tokens out of normal use
A direct Agent URL and token option exists in Advanced Manual Setup for development, recovery, or older Agents. Normal setup uses automatic pairing or a one-time code instead.
Releases and integrity
Check what you download
AnxOS releases are published on the official release page. Which verification applies depends on the package you install.
Linux packages
Not code-signedThe Linux .deb and .AppImage builds and the AnxOS Agent .deb are not code-signed. Integrity is checked with the SHA-256 checksums published with each release.
Official release page
Download here onlyDownload from the official release page linked on this website. Builds shared through other sites or file hosts are not covered by the AnxOS release process.
Headless servers
Agents on machines without a desktop
The official AnxOS Agent package runs on Debian 11+ and Ubuntu 22.04+ x64. It is built for servers that never open a desktop window, and it follows the same rules as the Windows Agent.
- Loopback by defaultThe Agent listens on loopback (127.0.0.1) by default, so a fresh install is reachable only from the machine itself.
- Exposure is an explicit opt-inNetwork exposure is a separate choice: in the TUI Pair screen you press n to allow network listening, and Public Access providers are added to the node on purpose.
- One-time pairing codesAdding a server generates a one-time pairing code that expires. You paste the code into Pair with Code once, and no token is copied from a config file.
- No desktop session neededThe Agent runs as a systemd service, so it starts with the server and keeps running without a desktop environment or an open terminal.
- Redacted diagnosticsAgent diagnostics are sanitized the same way as on Windows and use fingerprints instead of credential values.
Your data
Your files stay where you put them
Servers, worlds, logs, and backups live in the storage locations you configure for each node. AnxOS does not move them to a developer-owned machine.
Local ownership
This PC keeps its instances and backups on your own drive. Remote nodes keep their data on the remote hardware you control.
Uninstalling keeps your data
Uninstalling AnxOS Control Center or the Agent does not delete your instances, worlds, or backups. They only go away if you delete them or an uninstall option explicitly says so.
Account is optional
Sign-in is optional. Local mode works offline with Local Owner access, and signing in only adds cloud and remote account features.
Server software can change your exposure
Installing server software can open local services, expose ports, create firewall prompts, or download third-party software depending on the templates, dependencies, and public access providers you choose. Review each install and permission prompt before you approve it.
Questions before you install?
The FAQ answers hosting, pairing, and SmartScreen questions in plain language, and the download page has the official installer.