From a hardened setup, keep an eye on a local coding agent from your phone
The scene
A coding job is already running on a machine at home or in the studio. You want to check progress or add a short instruction from your phone, without putting that machine directly on the public internet.
Tools involved
What they did
- Get Claude Code working normally on the machine first. Do not open a port as the first step.
- Use keys, a firewall, and a tightly controlled tunnel or private network. Do not expose a development machine directly to the public internet, and confirm you need a port before opening one.
- Grant only the access needed to read logs or send a short instruction, with a timeout and a way to disconnect at once.
- Wait until you are back on a trusted network before operations that involve secrets, publishing, or deletion.
Copyable prompt
Help me design a locked-down way to check this already-running Claude Code session from my phone. Prefer a key-based, firewalled tunnel over opening the machine to the public internet. List every port or permission you would need and wait for my approval before changing any network setting. Do not expose secrets.
Rewritten here for you to try; not a verbatim excerpt from elsewhere. What it asks：Ask the agent for a hardening plan and a permission list, and do not let it change network settings until you approve.
Things to watch
Public discussion described a followable setup; security was not retested here. Remote access must be hardened. Do not expose a development machine directly to the public internet. With a careful setup, this is generally reproducible in China.
A local Claude Code subscription, plus a remote-access path you harden yourself.