Open source · MIT · End-to-end encrypted

Bridge

One encrypted remote for Claude, Codex, and Hermes Desktop.

Control desktop AI agents from your phone, keep every native session, account, model, and permission separate, and hand work between desktops only when you explicitly approve it.

Bridge remote control for Claude, Codex, and Hermes Desktop

What it does

Unified control. Separate native worlds.

Bridge is not a remote desktop and not an input automator. It is a protocol and host layer that gives one consistent interface to three desktop runtimes.

One session surface

Send, stream, approve, ask, steer, and stop Claude, Codex, and Hermes sessions from desktop or mobile.

End-to-end encryption

Per-device AES-256-GCM keys, WebRTC direct connections, and an encrypted WSS relay that never sees message content.

Cross-desktop relay

Hand a bounded, redacted, encrypted task context to another runtime after two human confirmations and a read-only plan.

Local-first adapters

Claude Agent SDK, official Codex app-server over stdio, and a loopback-only Hermes Gateway with process-scoped tokens.

Real evidence

Image attachments, file-change summaries, artifact previews, and host-side file opening render as actual content, not paths.

Built to recover

Offline queues, event replay, push wake, fast reconnect, session archive, delete, and crash-safe relay recovery.

Architecture

Phone, desktop host, and relay.

Devices prefer a direct WebRTC data channel. When they cannot connect directly, traffic falls back to a self-hostable relay that stores only ciphertext and routing metadata.

Read the full architecture document for adapter contracts, ownership states, and the relay state machine.

Security

Safe boundaries are a product feature.

Bridge deliberately refuses the shortcuts that make agent remotes risky.

No accessibility access No synthetic clicks, keyboard events, or clipboard reads.
No private CDP Bridge uses public interfaces and read-only transcript observation.
No OAuth extraction Credentials stay inside each desktop runtime.
No hidden chain-of-thought Only bounded, user-visible context travels between devices.
No automatic failover Cross-desktop relay always waits for explicit human approval.
No credential migration Relay packages never contain keys, OAuth tokens, or API secrets.

Full details in the security model.

Download

Try it today.

Prebuilt desktop installers and Android APKs are published for every release. The repository is MIT licensed and ready to build yourself.

Quick start: npm ci then npm run dev:desktop. Requires Node.js 22.13 or newer.