A private, self-hosted remote for your coding agent — full terminal and chat, every edit gated with a diff. See every Claude Code session on your Mac — even ones you start in your own terminal — and take any over, all over a direct end-to-end-encrypted tunnel. No account. No cloud.
AI coding agents run for minutes and need a human in the loop — “can I edit this file?”, “can I run this command?” Leave your desk and it just waits. The fixes on offer make you sign into someone else’s cloud and route your code through their servers.
Run npx cloak-remote. It prints a QR and sets a PIN — the tunnel binary downloads itself, no account.
Scan the QR with the Cloak app and enter the PIN. The two devices pair directly over end-to-end encryption.
Approve edits, run commands, watch responses stream — see every Claude session on your Mac, take any over, and get an on-device alert the moment one needs you or finishes.
A real shell and the Claude chat, multiplexed — as many sessions as you want, persistent across disconnects.
See every Claude Code session on your Mac — the ones in the app and the ones you start in your own terminal — each with live status: running, needs you, done.
Pick up a session you left running on your laptop, right from your phone — open it as a chat with approvals, or a real claude --resume shell.
Inline diffs, destructive-command flags, and “always allow” when you trust it. Nothing runs without your tap.
Streaming responses, stop/interrupt, searchable transcripts, and an on-device alert the second a task needs you or finishes.
A direct E2E tunnel with per-session forward secrecy. Your keys never leave the two paired devices.
Your agent works in the open on your machine. Your traffic works in the dark. There’s no one in the middle, because there’s no middle.
The QR carries only a public key — no secret is ever transmitted. The shared key is derived per connection, and you can check the fingerprint yourself while the network tab stays empty.
Tell us what you're building and how you'd use Cloak. We read every message and reply from a real person — no autoresponders.