Tailscale
Tailscale
The bus is exposed only on your tailnet, through tailscale serve or the host’s tailnet address.
B1 runs tailscale serve --bg --https=8443 in front of the loopback listener; it needs HTTPS certificates enabled on the tailnet. B2 binds the address from tailscale ip -4 on port 47910.
Grant the session machines access to the bus host’s port in your tailnet ACL. Identity headers from tailscale serve are logged for attribution only and never used for authorization.
More integrations
All integrations →- 01
Claude Code
Each machine adds a user-scope MCP entry named bus; push sessions add a second entry, bus-push.
- 02
1Password
scripts/setup-client.sh writes MCP entries that hold an op:// reference, never the token itself.
- 03
launchd
scripts/install-unit.sh --launchd renders a LaunchAgent that keeps the bus running.