> ## Documentation Index
> Fetch the complete documentation index at: https://docs.clawcontrol.cc/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings and Remote Access

This page describes implemented settings behavior, including remote access mode.

## Settings Stored

Config API persists:

* `gatewayHttpUrl`
* `gatewayWsUrl`
* `gatewayToken`
* `workspacePath`
* `remoteAccessMode`
* `setupCompleted`

## Remote Access Mode Values

* `local_only`
* `tailscale_tunnel`

No other mode is accepted by the settings API.

## Loopback Validation

Settings update rejects non-loopback gateway URLs with `NON_LOOPBACK_FORBIDDEN`.

Accepted hosts include loopback values such as:

* `127.0.0.1`
* `localhost`
* `::1`

## Desktop-specific UX

In desktop mode, settings page can:

* open native directory picker
* request local server restart after workspace change
* show independent Gateway reachability and CLI availability indicators

## Explicit Policy

* ClawControl remains loopback-only regardless of selected remote mode.
* Remote mode indicates planned tunnel workflow, not bind exposure behavior.
* `tailscale serve` remains disallowed.

## Last updated

2026-02-13

## Related pages

* [Tailscale Tunnel (SSH Port Forwarding)](/remote/tailscale-ssh-tunnel-only)
* [Config and Init](/api/config-init)
* [Local-only Networking Enforcement](/security/networking-local-only)