Security

The terminal stays on your machine

AI Anywhere is a local bridge, not a hosted terminal. The browser talks to the process running beside tmux, while tmux.online handles the public site and account authorisation

Local by default

The server listens on 127.0.0.1 by default. A process bound to that address is reachable from the same machine, not directly from the public internet

Connections are checked

The local URL contains a connection token, and the server validates the request Origin. A random web page cannot silently connect to an open local terminal

Terminal output and keystrokes are not sent to the account service
Files and CLI credentials remain on the machine
Remote connections use your own SSH configuration without a terminal relay

What the account service does

The account service authorises devices and manages membership and API keys. It does not carry terminal streams. Revoking a device removes its account authorisation without stopping the tmux tasks already running on that machine