Private by design

Your box. Your network. Nobody else's.

Couchside talks only to the service on your own LAN. There is no cloud in the middle, because there is no cloud at all.

Token auth

A secret key (bearer token) generated on your box and stored in your phone’s keychain. Only a paired phone can talk to the service.

LAN-only

No relay, no telemetry. The phone and the box on the same Wi-Fi, full stop.

Least privilege

The service can run an exact, audited allowlist of commands and nothing else.

Auditable

The service is open source (MIT); the app's source is public too. The whole project is on GitHub if you want to read every line.