> ## Documentation Index
> Fetch the complete documentation index at: https://docs.thinkingmach.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deployment Overview

Paperclip supports three deployment configurations, from zero-friction local to internet-facing production.

## Deployment Modes

| Mode                        | Auth              | Best For                              |
| --------------------------- | ----------------- | ------------------------------------- |
| `local_trusted`             | No login required | Single-operator local machine         |
| `authenticated` + `private` | Login required    | Private network (Tailscale, VPN, LAN) |
| `authenticated` + `public`  | Login required    | Internet-facing cloud deployment      |

## Quick Comparison

### Local Trusted (Default)

* Loopback-only host binding (localhost)
* No human login flow
* Fastest local startup
* Best for: solo development and experimentation

### Authenticated + Private

* Login required via Better Auth
* Binds to all interfaces for network access
* Auto base URL mode (lower friction)
* Best for: team access over Tailscale or local network

### Authenticated + Public

* Login required
* Explicit public URL required
* Stricter security checks
* Best for: cloud hosting, internet-facing deployment

## Choosing a Mode

* **Just trying Paperclip?** Use `local_trusted` (the default)
* **Sharing with a team on private network?** Use `authenticated` + `private`
* **Deploying to the cloud?** Use `authenticated` + `public` — see [AWS ECS Fargate guide](aws-ecs.md)

Set the mode during onboarding:

```sh theme={null}
pnpm paperclipai onboard
```

Or update it later:

```sh theme={null}
pnpm paperclipai configure --section server
```