ContextQMD
Back to Paperclip

Deployment Overview

docs/deploy/overview.md

2026.428.01.4 KB
Original Source

Paperclip supports three deployment configurations, from zero-friction local to internet-facing production.

Deployment Modes

ModeAuthBest For
local_trustedNo login requiredSingle-operator local machine
authenticated + privateLogin requiredPrivate network (Tailscale, VPN, LAN)
authenticated + publicLogin requiredInternet-facing cloud deployment

Quick Comparison

Local Trusted (Default)

  • Loopback-only host binding (localhost)
  • No human login flow
  • Fastest local startup
  • Best for: solo development and experimentation

Authenticated + Private

  • Login required via Better Auth
  • Binds to all interfaces for network access
  • Auto base URL mode (lower friction)
  • Best for: team access over Tailscale or local network

Authenticated + Public

  • Login required
  • Explicit public URL required
  • Stricter security checks
  • Best for: cloud hosting, internet-facing deployment

Choosing a Mode

  • Just trying Paperclip? Use local_trusted (the default)
  • Sharing with a team on private network? Use authenticated + private
  • Deploying to the cloud? Use authenticated + public — see AWS ECS Fargate guide

Set the mode during onboarding:

sh
pnpm paperclipai onboard

Or update it later:

sh
pnpm paperclipai configure --section server