Connectivity you can verify

Connection status must reflect a working tunnel or proxy. The system never uses invented ping, server load or IP addresses.

The API manages devices and sessions. An mTLS-authenticated Node Agent manages WireGuard. Proxy credentials are temporary, expiring and revocable.