OpenCode, Claude Code and Codex — remote, done right
One command to install on Linux or macOS. Your agents never listen on the network.
A session on the build box
Built for teams that run their own agents
OpenCode · Claude Code · Codex
Outbound-only agent
Worktree per session
Live transcript
Permission prompts
Your own TUI, on demand
What it does
Use OpenCode with any provider, Claude Code with your Claude subscription, or Codex with your OpenAI account — whatever is logged in on the host. Choose the agent, model and effort per session, and fall back to another agent when one hits its usage limit.
The agent dials out over an encrypted tunnel; OpenCode, Claude Code and Codex run locally as child processes or on localhost with a per-boot password. Only an allow-listed set of commands ever crosses the wire.
Text, reasoning, tool calls with their output, file changes, cost, tokens and context usage stream live into the browser. Approve permissions and answer questions from your phone.
Sessions in a git repository get their own worktree and branch, so parallel sessions never collide. Point the agent at one repository or a whole folder of projects, and clone new ones from GitHub.
Ask Code
How it works
Name the machine and copy the one-line install command with its one-time pairing token.
The installer fetches the agent, checks for OpenCode, Claude Code, Codex and the GitHub CLI, pairs the host and registers a service.
Pick a repository and an agent — OpenCode, Claude Code or Codex — get a worktree, and drive it from the browser.
0 open ports
the agent only dials out
1 command
to install, pair and start
1 worktree
per session, cleaned up on end
Good to know
No. The Code agent on your host makes an outbound, encrypted connection to Kavaro; Claude Code and Codex run as local child processes and OpenCode listens only on localhost. Nothing is reachable from outside unless you explicitly create a temporary, password-protected direct-access link — which you can revoke at any time.
One command on the host, as your normal user: it downloads the agent, checks for OpenCode, Claude Code, Codex and the GitHub CLI, pairs the host with your team and registers a background service. Takes about a minute.
Sessions in a git repository get their own git worktree and branch, so the main checkout is never touched. When you end the session the worktree is removed.
Yes. On the host, `kavaro-code attach` opens the OpenCode TUI against the same sessions. From another machine, create a time-boxed direct-access link and attach with `opencode attach`.
