A daemon on every host you own.
curl -fsSL https://spawnd.dev/install.sh | sh
The rite · how it works
One daemon per host.
Installs with a line. It dials out, no inbound ports, no SSH, no tailnet, and registers the host as yours.
Summon agents into it.
Anything that runs in a PTY. Each agent runs on your hardware, on the subscriptions you already pay for. We never hold your keys.
Reach them from anywhere.
The real terminal, in any browser, down to the one in your pocket. A second device can take the session mid-keystroke.
The same terminal, anywhere you stand.
Every session is a live PTY on your host, rendered faithfully in the browser in your pocket, not a read-only viewer.
A workspace is a named grid of terminal windows rooted in one folder on a host, with shells, agents, and file explorers side by side.
Every daemon dials out to one master: no inbound ports, no SSH, no tailnet. Revoke a host and the socket dies.
Walk away mid-command and pick the same session up on another device. It follows you mid-keystroke.
The server can't read your terminal.
Terminal bytes travel browser-to-daemon, end-to-end encrypted; a forced relay carries ciphertext it can't read. The daemon dials out, so there are no inbound ports, no SSH, no tailnet. The threat model names our own servers as the adversary, because you should treat them as one.
Read the threat model$ spawnd relay --attach 8f31c2
signalbrowser ⇄ daemon · introduced
terminalredacted ciphertext only
plaintextnever arrives
transcriptnone kept
keysnone held, agents use their own logins
$ spawnd revoke host-07
socket closed. it answers to no one now.
A daemon that dials out and answers to one master sounds ominous, until you notice the master is you.
The reliquary · carried
Every possession, in your pocket.
The app is the same seance as the browser, not a summary of it. Start a session at the desk and pick it up on the train; approve a host, watch an agent work, end it from the platform. The daemon never leaves your machine — the phone is only a window onto it.
Agents are shortcuts, not lock-in: a named command typed into a real shell on your host. If it runs in a terminal, it runs here, under its own login, on your machine.
Bring a host online.
One line installs the daemon; you approve it against a fingerprint you can see. From then on, it answers only to you.
curl -fsSL https://spawnd.dev/install.sh | sh