REQUEST devices.list · list trusted devices Named task from the sample picker
More reach. Clear boundaries.
Give your tools reach across devices, with a clear boundary around every capability.
Full capability details ↓EXPLORE THIS FEATURE
Choose a view
AI ACCESS · LOCAL SAMPLE
Give an agent a key with edges.
Pick a named request, choose the capabilities it may use, and run a preview of the decision that reaches the fabric.
REQUEST TRACE
PREVIEW ONLYDevice list
GATE Waiting for a sample preview Run the preview to check the selected key
RESULT No tool or program has run A preview result appears here
The sample key contains everything required for device list.
Interactive local sample · No AI model, system tool, or program runs here.
How it works
Open the door
Enabling MCP writes a state file. Nothing listens until you say so.
Mint a scoped key
Registering a client takes explicit capability flags. The token prints exactly once.
Connect a host
The host speaks streamable HTTP with a bearer token, to loopback only.
Filter the tools
The listing shows only what the key holds, and a call it lacks is refused again.
Cross the fabric
The door has no fabric of its own. It asks the daemon, which uses the peer session.
Audit and revoke
Every call publishes an event by credential name, and revoking ends work already in flight.
The daemon can open a single HTTP listener on loopback and speak MCP on it. Claude Code, or any host that can send a bearer token, connects with a key you minted and can then list your devices, read one machine's live state, and run a named program on another. The same daemon is driven by the CLI and by a typed client SDK — all three through one deny-by-default capability model.
What this feature is not
- Not a shell. Running a program takes a program and a pre-split argument list — no quoting, no pipes, no expansion.
- Not on by default. The capability ships in the default build and still opens no port until you enable it.
- Not a discovery listing. It reports what this machine already trusts; an unknown machine on the network is not a device.
- Not the whole control surface exposed to a model. Nothing auto-exports service methods, raw channels or platform APIs.
▸ Development records
14 capabilities, tracked in the project.
These are recorded implementation states, not public release availability. Platform and direction support vary; public releases remain unverified.
The door
- Working today MCP over loopback
One local endpoint an AI host connects to with a token you minted.
- Working today Off until you say so
The feature ships in the default build and opens no port until enabled.
- Planned Hosted-connector carrier
A token in the URL, for hosts that cannot send a header.
What a model can do
- Working today List devices
The model learns your device ids, and which one it is standing on.
- Working today Read a machine's state
cpu, memory, storage and the heaviest processes on any paired device.
- Working today Run a named program
One program on another device, with its real exit code coming back.
- Working today Ask the key what it holds
The key explains itself, so a missing tool never reads as a bug.
- Planned Action registry
A general catalogue of AI-safe actions beyond the first four tools.
Keeping it bounded
- Working today Capability-scoped keys
Each key holds only the capabilities you named. Everything else is denied.
- Working today Tools filtered by capability
A tool the key cannot use is absent from the list, and refused if called anyway.
- Working today Live revocation
Revoking a key refuses the next call and kills the one already running.
- Working today Per-call audit events
Every call records credential name, tool, device and outcome.
For your own code
- Working today The xs CLI
Scriptable device control with JSON output and real remote exit codes.
- Working today Local client API and SDK
A typed SDK that drives a real daemon — and is refused the admin surface.
GET XROSS Start with the devices
Start with the devices
you already own.
Make a little more room for what you do.
Find your way in.
Public downloads are being confirmed. Explore the workflows and development status to see what's taking shape.
Explore features