Connect a device — Harriet Desktop or Harriet Endpoint

When someone receives an enrollment invite email, the intended path is:

1. Open the secret enrollment link — it expires (typically 24 hours) and does not require signing in to Harriet first. The page shows the one-time token and, where your tenant publishes builds, downloads for Harriet Desktop and Harriet Endpoint (macOS and Windows).
2. Connect on this computer — choose Harriet Desktop (sign in with your Harriet account; recommended on Linux, where Harriet Endpoint is not available) or, for Claude Desktop users on macOS or Windows, Harriet Endpoint (Claude Desktop helper): download the menubar or taskbar app, open Connect, and approve in the browser. Harriet Endpoint updates itself when new versions are published.
3. Link the device — after the agent runs, open the device link page and enter the 9-character code shown on the machine (if your rollout uses device linking).
4. Onboard in chat — in Harriet Desktop, try /onboard or a short prompt to connect integrations and load your workspace rules.

Advanced paths

• Terminal agent (CLI / MDM) — on the enrollment page or in Endpoint AI Devices, expand Advanced for Mac (curl … | bash) or Windows PowerShell one-liners. Use when IT deploys the agent without Harriet Endpoint or Harriet Desktop, or for Jamf/MDM automation.
• Claude Desktop — if your organization standardizes on Claude Desktop, install Claude where required, then connect via Harriet Endpoint on macOS or Windows so skills and MCP sync into Claude. The Help tab in Endpoint AI lists install commands and downloads for all platforms.

Signing in to Harriet is optional before opening the enrollment link; it can still help users confirm they are on the correct organization account before or after linking.

For rollout sequencing with Endpoint AI, see Rolling out Harriet with Endpoint AI. For what Endpoint AI governs at a high level, see What is Endpoint AI and when should we use it?.