BB Bridge

Connect BB Cloud to files and approved commands on a paired workstation without making that workstation directly reachable from the internet.

What is BB Bridge?

BB Bridge is BB's remote agent. It runs on the computer that holds the files or development environment you want BB to use, then keeps an outbound connection to your BB hub.

After pairing the device, you add it to a project as a data source. BB can then work with the specific root path and command permissions you grant to that data source, even when you are using BB from another device.

Good fit for

  • Repositories or files that stay on a desktop, laptop, or build machine
  • Projects that need approved local developer tools as well as file access
  • Using BB Cloud while the work itself remains on your workstation

Note: LWB is the internal shorthand for Local Workstation Bridge. You may see it in technical logs or configuration labels.

How access is controlled

BB Bridge uses two layers of permission. The device owner sets the outer limit in the BB Bridge app; project configuration can only narrow that limit.

On the device

  • Choose the root paths that BB Bridge may expose
  • Mark a root read-only when changes must not be allowed
  • Choose which capabilities and shell commands the device permits
  • Keep the pairing credential in the operating system's credential store

In BB

  • Select one paired device for the data source
  • Select one of the roots reported by that device
  • Limit commands to a subset of the device's allow-list
  • Assign the data source to the appropriate workspace and project

A workspace administrator can configure a project's data-source grant, but cannot expand the device owner's local policy. Revoking a paired device immediately removes its access from BB.

Set up a BB Bridge data source

  1. Prepare the workstation. Install and open BB Bridge on the computer that holds the resources. In its device policy, add only the root paths, capabilities, and commands you want to make available. The default policy is deliberately restrictive.
  2. Pair the device. In BB, open Settings → BB Bridges and start a pairing session. Give the device a recognisable label, then enter the one-time pairing code in BB Bridge. A successful pairing connects the agent to the selected hub.
  3. Confirm it is online. Return to BB Bridges and verify the device is connected. If it is offline, start BB Bridge and check its hub selection before continuing.
  4. Add the project data source. Open the project's data sources, select BB Bridge, then choose the paired device and one of its reported root paths.
  5. Limit command access. If the project needs the execute tool, select only the commands it needs. Leaving every command unchecked disables command execution for that data source.
  6. Save and use it in a conversation. BB will make the configured data source available alongside the project's other sources.

Operational notes

  • The computer running BB Bridge must be online and the agent must be connected when BB needs to use its data source.
  • BB can only select roots and commands that the device has reported. To expose a different location or tool, update the device policy in BB Bridge first.
  • Read-only roots remain read-only even if a project requests write access.
  • One BB Bridge device backs each BB Bridge data source. Add separate data sources when work needs to be performed on different computers.
  • If a device is lost, retired, or no longer trusted, revoke it from Settings → BB Bridges.

Related guides

Data Sources

Learn how BB makes project resources available to conversations.

Project Manager

Create and manage the project that will use your BB Bridge data source.

Last updated: August 6, 2026