One curl line on the box, biometric pairing in the app, then chat with the agent from anywhere. No inbound port. No DNS. Your code never leaves your server.
curl -fsSL https://drisse.app/install | bash
Drops a Go binary in /usr/local/bin/drisse-agent, installs a systemd unit, generates an Ed25519 keypair, then prints a pairing URL you open in the iOS app.
The agent dials out to the Drisse edge over HTTPS. No port to open, no DNS to configure, no Cloudflare account. Works behind any firewall or NAT.
Every shell command, edit, or write triggers a Face ID prompt on your phone before it runs. You let claude code freely on safe stuff and gate the dangerous parts.
See claude reason, read files, run tools in real time. No polling, no tail latency. Same UX as the desktop CLI, redesigned for mobile.
Each server gets an Ed25519 cert signed by your Drisse CA. Revoke a server in one tap and its cert is invalidated immediately. No shared bearer tokens.