Getting started

This page takes you through the hosted trial from sign-up to an answer about one of your own servers: start the trial, open your workspace, enrol a server with one command, and ask it a question. The last step removes the agent again.

What you need

• A work email address.
• A Linux server or a Mac where you can run sudo. Pick one with nothing sensitive on it: the trial runs on the hosted service, outside your network.
• Outbound HTTPS (port 443) from that machine to app.actree.ai. The agent opens the connection itself, so no inbound port is needed.

1. Start your trial

Open the trial sign-up page and enter your name, work email and organisation, or continue with Google. The trial covers up to 3 hosts for 7 days. After that, the workspace continues as a free tier with 1 host, using your own model. No card is needed.

If you signed up with your email, open the verification link we send you. It works once and expires after 24 hours. Choose a password of at least 12 characters and select Start my trial.

2. Open your workspace

The portal shows Your trial is ready. Select Open your AcTree workspace; the workspace uses the same account and password as the portal. If the portal says it is still preparing your workspace, the link appears there as soon as the workspace is ready.

3. The model

The trial includes a metered hosted model, so you can ask questions straight away. To use your own model instead, add it under Models in the workspace settings; the admin guide explains the options.

Bring your own model — OpenAI-compatible endpoints, Ollama, Anthropic, or Cloudflare AI Gateway / Workers AI — with keys envelope-encrypted at rest.

4. Enrol your first host

In the workspace, open Hosts, then Add a host. On the Linux servers or macOS card, select Generate enrollment token and copy the install command it shows. The token is valid for 24 hours and enrols one host. The command looks like this:

curl -fsSL https://app.actree.ai/api/v1/fleet/agent/install.sh | sudo bash -s -- --token <enrollment-token>

Run it on the server. It downloads the agent build for that machine’s operating system and processor, checks the download against the published SHA-256 checksum, and installs the agent as a service: systemd on Linux, launchd on macOS. When it finishes, the server appears under Hosts.

A host joins the fleet with one install command and an enrollment token; revoking the host unpairs it.

Read-only execution policy is the default on every enrolled host; the full policy is an explicit, per-host choice.

The workspace uses a publicly trusted TLS certificate, so the command needs no certificate setup. If a proxy on your network inspects TLS, the machine must trust that proxy’s certificate authority, or the download stops with a certificate error.

5. Ask your first question

Open Chat, type your question, then pick the hosts it is about. For example: which hosts still allow SSH password sign-in?

Host investigations show the commands that ran, their exit codes and output, per host.

6. Remove the agent

When you no longer need the agent on a server, run this on that server:

curl -fsSL https://app.actree.ai/api/v1/fleet/agent/install.sh | sudo bash -s -- --uninstall

It tells the workspace the host is leaving, which revokes the host and frees its seat. It then stops the service and deletes the agent’s files and, on Linux, its service account. If the workspace cannot be reached, the files are still removed; revoke the host under Hosts to free its seat.

If the install stops

• The download fails with error 401. The token has expired (after 24 hours) or has already enrolled a host. Select Generate a new token on the same card and run the new command.
• The machine still has the agent from an earlier enrolment. The workspace will not enrol it a second time. Add --reenroll after the new token: the old enrolment is revoked and its seat freed first.
• No agent build is published for this platform. There is no build for that operating system and processor yet; use another machine.