How it works

Three parts: the agent on your machines, the gateway, and your AI client.

Agent

A single binary on Windows, macOS or Linux. It runs as a normal user, connects out to the gateway over TLS, and enforces the allowed folders, read-only and no-command switches and secret masking on the device itself.

Gateway

Signs in AI clients with OAuth, routes each tool call to the right machine, holds approval requests, records the audit log, and serves the dashboard. No inbound port is opened on your machines.

AI client

Claude, ChatGPT, Cursor or any client that supports remote MCP servers adds one URL and lists the machines it may use.