CludCode

Active

Your dev machine, from anywhere

Remote access to your development machine with end-to-end encryption. Run Claude, Docker, vim — whatever you run locally. Zero config, zero knowledge, zero trust relay. Multi-device support with Stripe billing.

arch

E2E encrypted

platform

Web + Desktop + iOS

relay

Zero-knowledge

Next.js Electron Bun WebSocket Stripe Supabase

cludcode.com →

// THE PROBLEM

You're on your phone or a tablet. You need to run something on your dev machine — deploy a fix, check logs, run Claude Code. SSH is painful on mobile. VS Code Remote requires a full IDE. CludCode gives you a terminal in your browser with end-to-end encryption and zero configuration.

// HOW IT WORKS

Install a lightweight agent on your machine (curl | sh, auto-updates)
Agent initiates outbound WebSocket connection to relay — no port forwarding
AES end-to-end encryption — the relay server sees encrypted bytes only
Open cludcode.com from any browser, anywhere
Full terminal with tmux session management

// IN ACTION

CludCode desktop with multiple terminal sessions and file browser

CludCode running on iPhone with Claude Code terminal

CludCode desktop welcome screen with multiple tabs

CludCode CludDesktop with code viewer and terminal side by side

CludCode agent TUI showing device status and encryption

Multiple Claude Code sessions with CludDesktop file browser.

Full terminal from your phone — Claude Code on the go.

Multi-tab terminal sessions with one-click device connection.

CludDesktop — file viewer alongside terminal and AI assistant.

The agent TUI — encryption enabled, zero-config setup.

// ARCHITECTURE

Four components that never trust each other. The relay is a zero-knowledge proxy — it forwards encrypted bytes without ever holding a decryption key. Your device key is generated locally and never leaves the machine.

  ┌──────────────┐          ┌──────────────┐
  │  cludcode.com │          │ CludDesktop  │
  │  (Next.js)   │          │  (Electron)  │
  └──────┬───────┘          └──────┬───────┘
         │ encrypted                │ encrypted
         │ WebSocket                │ (local or relay)
         ▼                          │
  ┌──────────────┐                  │
  │    Relay     │ ◄────────────────┘
  │ zero-knowledge                  │
  │ proxy — sees │    ┌─────────────┘
  │ only encrypted    │ local network
  │ bytes        │    │ shortcut
  └──────┬───────┘    │
         │            │
         ▼            ▼
  ┌─────────────────────────────────┐
  │            Agent                │
  │   (Bun binary on your machine) │
  │                                 │
  │  ┌─────────┐ ┌──────┐ ┌─────┐  │
  │  │ Terminal │ │Docker│ │Files│  │
  │  │ (tmux)  │ │      │ │     │  │
  │  └─────────┘ └──────┘ └─────┘  │
  │  ┌──────────────────────────┐   │
  │  │  MCP Server (for Claude) │   │
  │  └──────────────────────────┘   │
  └─────────────────────────────────┘

  Encryption: AES-256-GCM
  Key exchange: ECDH (per-session forward secrecy)
  Device key: generated locally, never transmitted

Zero-trust architecture. The relay never sees plaintext. CludDesktop can bypass it entirely on local networks.

// KEY DECISIONS

Agent initiates outbound — no port forwarding, no firewall config, works behind any NAT
Per-session forward secrecy via ECDH key exchange — compromising one session reveals nothing about others
Single binary compiled with Bun for four platforms (darwin/linux, arm64/x64) — one curl to install, auto-updates
Local network shortcut — CludDesktop detects the agent on LAN and connects directly, bypassing the relay for zero latency
MCP server on the agent — Claude Code can access your machine through CludCode with the same E2E encryption