Use Devin Pocket from another device

Devin Pocket listens only on loopback by default. Remote access requires deliberately changing the host binding and protecting the connection yourself. The web UI has no built-in client authentication, pairing or TLS. Use only a trusted LAN, or an access-controlled tunnel or proxy; never expose the agent interface directly to the public internet.

No built-in client authentication, pairing or TLS. --host 0.0.0.0 exposes agent capabilities to your network. Use only a trusted LAN; never expose it directly to the public internet.

Step by step

1. 01

   Keep local access unless you need more

   Default is http://127.0.0.1:7777. Origin checks are not authentication. Anyone who can reach an unprotected UI may access agent capabilities.

2. 02

   Stop before changing the binding

   An already-running instance keeps its existing options. Stop it safely, then restart with an explicit host. Use this command only on a trusted LAN.

   $

   devin-pocket stop

   $

   devin-pocket start --host 0.0.0.0 --port 7777 --no-open

3. 03

   Open the host address in the other browser

   Use http://YOUR_HOST_LAN_IP:7777 with the actual host IP. The CLI open command always opens 127.0.0.1, not a remote address. Non-local HTTP may lose secure-context/PWA features.

4. 04

   Protect or close access

   For deliberate remote access, use an access-controlled tunnel/proxy. Pocket does not set one up or provide TLS. Do not forward its port to the public internet. Restore loopback when finished.

   $

   devin-pocket stop

   $

   devin-pocket start --host 127.0.0.1