A native mobile terminal that watches Claude Code, Codex & Kimi running on your machine. The session survives Wi-Fi↔5G, sleep, even app kill — pick up exactly where it was.
One line on your dev machine. Installs the agoches daemon and the agent hook scripts — nothing to configure.
Run agoches serve. It prints a QR encoding an iroh NodeId. Scan it from the app to hole-punch a direct, key-pinned QUIC link.
Type, talk, approve and review diffs. Mosh keeps the session alive across network changes — your agents never drop.
One product across iOS, iPadOS & Android — Apple HIG and Material 3. Every screen here is a faithful recreation of the real app.
Hook events turn raw terminal output into a board of tasks across every host, so you can see what each agent is doing at a glance.
Full VT/xterm emulation with a custom accessory key bar — and an agent layer that knows when Claude Code is waiting on you.
The daemon reads the working tree on your host, so you can open the agent's files and see exactly what changed — without leaving your phone.
iroh dials your machine by its public key and hole-punches a direct, end-to-end-encrypted QUIC link. Nothing is exposed to the internet, and the connection is authenticated by the key itself — so it's MITM-proof by default. No firewall rules, no DNS, no IP to leak.
Every approval comes with a syntax-highlighted diff of the agent's working tree, pulled live from git on the host.
An adaptive split view — agents, terminal and diff side by side — with hardware-keyboard ⌘ shortcuts and Stage Manager.
Most remote-access tools make you choose between security and reach — open a port, run a VPN, or trust a tunnel. agoches gives you a direct, encrypted P2P link dialed by public key, plus a layer built specifically for watching AI agents.
No inbound ports, no port-forwarding, no firewall rules. Your machine is never exposed to the public internet — there's nothing to scan or brute-force.
The connection is dialed by an ed25519 public key and runs over QUIC. The key is the address, so the link is end-to-end encrypted and MITM-proof by default — no certs to manage.
Hole-punches straight through NAT, CGNAT and mobile networks; falls back to an open relay only when a direct path is impossible. No static IP, no VPN daemon, no extra infra.
| Capability | agoches | SSH apps Termius · Blink |
Tailscale + SSH |
Mosh | Web terminal ttyd · wetty |
VS Code Remote / Cursor |
|---|---|---|---|---|---|---|
| No open ports / port-forwarding | ✓ | ✕ | ✓ | ✕ | ✕ | ✕ |
| Works behind NAT / CGNAT out of the box | ✓ | ✕ | ✓ | ✕ | ✕ | ✕ |
| Dial by key — no IP or DNS needed | ✓ | ✕ | ~ | ✕ | ✕ | ✕ |
| Encrypted & MITM-proof by default | ✓ | ~ | ✓ | ✓ | ✕ | ✓ |
| Survives network change & app kill (session re-attach) | ✓ | ✕ | ✕ | ~ | ✕ | ✕ |
| Agent-aware: tasks, diffs, approvals | ✓ | ✕ | ✕ | ✕ | ✕ | ~ |
| Push notification when a job finishes | ✓ | ✕ | ✕ | ✕ | ✕ | ✕ |
| Native mobile app (not a web wrapper) | ✓ | ✓ | ✕ | ✕ | ✕ | ✕ |
| No extra infra (no VPN / signaling / TURN) | ✓ | ~ | ✕ | ~ | ✕ | ~ |
Free while in beta. The daemon runs on your computer; the app lives on your phone. Pair them once with a QR.
curl -fsSL https://agoches.app/install.sh | sh
copy
Get the native app, open it, and scan the QR your daemon prints. iOS 16+ · iPadOS · Android 12+.