Skip to main content
A paired device is a mobile phone or tablet that has been approved to communicate with your desktop server through the gateway. Each device gets a unique ID and a cryptographic attestation that the gateway uses to verify its identity. Devices are paired once using a short-lived code you generate on the CLI. After pairing, the device connects automatically.

​
Pair a new device

1

Generate a pairing code

Run the following command on your desktop to create a one-time pairing code:
hirocli device add

Pairing code created
  code      : 482917
  expires_at: 2026-03-04T10:05:00Z
Use this code in the mobile app immediately.
The code expires after 5 minutes by default. Once used or expired, it cannot be reused.
2

Enter the code in the mobile app

Open the Hiro League mobile app and enter the code when prompted. The app contacts the gateway, which forwards the pairing request to your running desktop server.
3

Confirm the device is approved

After pairing, confirm the device appears in your approved list:
hirocli device list

​
Options

OptionDefaultDescription
--ttl-seconds300How long the pairing code is valid, in seconds.
--code-length6Number of digits in the pairing code.
--workspace, -WdefaultWorkspace to issue the code against.
If your mobile app is slow to load, increase the TTL: hirocli device add --ttl-seconds 600
Your desktop server must be running (hirocli start) before a pairing request can be processed. The mobile app will not complete pairing if the server is offline.

​
List approved devices

hirocli device list
Displays all devices that have successfully paired with this workspace: 
              Approved devices
┌──────────────────────────┬──────────────────────────┬──────────────────────────┐
│ Device ID                │ Paired At                │ Expires At               │
├──────────────────────────┼──────────────────────────┼──────────────────────────┤
│ mobile-3f8a2c1d9e4b      │ 2026-03-04T09:42:00Z     │ 2026-04-03T09:42:00Z     │
└──────────────────────────┴──────────────────────────┴──────────────────────────┘
Device ID — a unique identifier assigned at pairing time. Use this ID to revoke access. Expires At — attestations expire after 30 days by default. When a device’s attestation expires, it must be paired again.

​
Options

OptionDefaultDescription
--workspace, -WdefaultWorkspace to list devices for.

​
Revoke a device

hirocli device revoke <device_id>
Removes a device from the approved list. The device will no longer be able to communicate through the gateway. 
hirocli device revoke mobile-3f8a2c1d9e4b
# Revoked device mobile-3f8a2c1d9e4b.
Revocation is immediate and permanent. The device cannot reconnect unless it pairs again with a new code.

​
Options

OptionDefaultDescription
--workspace, -WdefaultWorkspace to revoke the device from.