Self-hosted access to private apps, LLMs, and AI agents.

Browser workspaces, scoped API sharing, and context-aware AI assistance — with outbound-only connectors to your private services.

English | 简体中文 | 日本語 | 한국어 | Español | Français | Deutsch

Website · Docs · Features · Install · Access protocols · Agent models · Product tour

Features

• 🤖 Local LLM access — Share local models through authenticated APIs and a browser Playground.
• 🔑 Controlled API sharing — Scope keys to models, set Token quotas, revoke access, and track usage.
• 🤖 AI agent access — Use Codex and Claude Code on your devices from the browser, with resumable sessions, execution progress, and permission prompts.
• 💻 Browser IDE — Edit projects and use terminals and extensions through code-server.
• ✨ AI in your workflow — Inspect terminal output, draft commands, and query databases within user permissions, with approval where required.
• 💬 Ask about your resources — Find connectors, devices, and applications within your access scope.
• 🔌 Outbound-only connectors — Connect private devices without opening inbound ports on them.
• 🔐 Application access — Access TCP, HTTP, HTTPS, WebSocket, and SSH services with per-access controls.
• 🖥️ Browser workspaces — Work with terminals, remote desktops, databases, and caches in your browser.
• 📁 Files and objects — Manage files over SFTP and browse S3-compatible storage (read-only).
• 🔎 Application discovery — Detect existing services on connector devices and register them from the console.
• 👥 Identity and access management — Manage users and resources with Casbin-backed authorization.
• 🛡️ Firewall policies — Restrict TCP and HTTP access by source IP or CIDR.
• 📋 Logs and audit — Review management actions and supported application sessions.
• 📦 Self-hosted deployment — Run the complete control plane on your own Linux server.

Install

Download the self-contained Docker bundle, extract it, and run the installer (Docker 20.10+ with Compose is required):

wget https://github.com/liaisonio/liaison/releases/download/v1.15.4/liaison-1.15.4-linux-amd64.tar.gz
tar -xzf liaison-1.15.4-linux-amd64.tar.gz
cd liaison-1.15.4-linux-amd64
./install.sh

Open https://<server-address> after installation. The installer prints the initial sign-in credentials.

Supported access protocols

Access your existing private services through Liaison.

LLM upstreams support OpenAI-compatible, Anthropic Messages, and Ollama. Clients use OpenAI-compatible endpoints; Anthropic upstreams also expose native Messages endpoints. Logos identify existing services you can access, not products bundled or deployed by Liaison. Database and desktop logos refer to browser workspaces, not native database/RDP/VNC server listeners.

Agent model providers

Configure the model behind Liaison’s built-in Agent, independently of service access.

Eight provider presets, plus custom OpenAI-compatible services.

Product tour

Local LLM access

Web SSH

Work in an audited browser terminal with an Agent that can inspect session output and help draft commands.

Private web applications

Access media servers and other internal web applications through Liaison.

Private AI assistants

Keep internal AI tools reachable without exposing the private network.

Web MySQL

Browse schemas, run SQL, and ask the session Agent to query and explain results, with approval where required.

Web MongoDB

Explore collections and ask the session Agent to run approved queries and explain documents, without a local client.

Web VNC

Open a private VNC desktop in a managed browser session.

Web RDP

Connect to an RDP desktop from the same access workflow.

Documentation

• Docker deployment
• API reference
• Release notes
• Issues
• Discussions

Contributing

Bug reports, feature proposals, documentation improvements, and pull requests are welcome. Start with Issues or open a Pull Request.

License

Liaison is licensed under the GNU Affero General Public License v3.0.