Loading devices...
Everything that can act for your account: the CLI machines you approved with sidekar device login (or an enrollment token, below), and the browsers that opened Chat, each holding a key of its own. If another Sidekar user invited you, their machines appear here too, marked as theirs. Revoking a machine removes its token, so it must sign in again; you can only revoke what belongs to your login.
Add a headless machine
A one-time enrollment token adds one machine (a VM, a server) to your account without a browser on it. It works once, for a short time, and creating one needs a recent sign-in. Anyone holding it can add a machine until it expires or is used: treat it like a password. You can also run sidekar device enroll-token on a logged-in machine.