Flow
Open the agent tray app, show or generate a pairing QR, and scan it from Android. Android completes pairing and shows the actions available for that computer.
Security
Pairing relies on public-key pinning. Android should only trust the agent identity represented by the QR payload and validated during the first connection.
Operational notes
Both devices must be on a network where Android can reach the host. Firewalls, guest Wi-Fi isolation and VPN routing can prevent pairing or later actions.