Relay access

Request access to the remotxai relay.

The hosted relay at app.remotxai.com is invite-gated. Each paired computer gets its own RELAY_TOKEN tied to that computer's identity. Tokens are revocable per row, never shared, and only the relay and the issued computer ever hold them.

1
Install the daemon.
On macOS or Linux with Node 26+, run curl -fsSL https://app.remotxai.com/install.sh | sh. See the Getting started guide for the prerequisites.
2
Generate your request blob.
Run remotxai invite --contact <your-email>. Copy the JSON it prints between REQUEST BLOB and END REQUEST. It carries your daemon's host id, its key fingerprint, your contact, and the daemon version. No network call happens at this step.
3
Send it to us.
Click the button below — it opens your mail client with the subject prefilled. Paste the blob into the email body and send. We review by hand and reply with your token, usually within a business day.
Email your request
Mail client won't open? Send to [email protected] with subject remotxai relay-access request.
4
Install the token.
When you receive your RELAY_TOKEN, save it at ~/.remotxai/relay-token with mode 0600, then run:
```
remotxai config relay set wss://app.remotxai.com --token-stdin < ~/.remotxai/relay-token
```
The relay setting is stored in ~/.remotxai/config.json; a running daemon applies it right away.

What the token is, what it isn't

Per-computer. Your token authenticates your daemon to the relay only. It doesn't identify you to other operators, and it doesn't cross the end-to-end-encrypted channel between your daemon and your phone.
Revocable. If your token leaks (committed to git, shared by mistake, lost device), email us — revoking it is a single row flip and a relay redeploy.
Replaceable. Want to rotate? Email us, get a fresh one, update the token file, and re-run config relay set. Same flow.

The relay sees ciphertext only. Session traffic is end-to-end-encrypted with Noise_XX between your daemon and each paired phone. The token authenticates the WebSocket carrier, not the session payload. Full model: threat model.