> **Self-hosted access to private apps, LLMs, and AI agents.**
Browser workspaces, scoped API sharing, and context-aware AI assistance — with outbound-only connectors to your private services.
[](https://github.com/liaisonio/liaison/actions/workflows/go.yml)
[](https://github.com/liaisonio/liaison/releases)
[](https://github.com/liaisonio/liaison/releases)
[](go.mod)
[](web/package.json)
[](web/package.json)
[](web/vite.config.ts)
[](web/tailwind.config.cjs)
[](#contributing)
English | [简体中文](./README_zh.md) | [日本語](./README_ja.md) | [한국어](./README_ko.md) | [Español](./README_es.md) | [Français](./README_fr.md) | [Deutsch](./README_de.md)
[Website](https://liaison.cloud) · [Docs](https://liaison.cloud/docs/get-started/introduction) · [Features](#features) · [Install](#install) · [Access protocols](#supported-access-protocols) · [Agent models](#agent-model-providers) · [Product tour](#product-tour)

## Features
- 🤖 **Local LLM access** — Share local models through authenticated APIs and a browser Playground.
- 🔑 **Controlled API sharing** — Scope keys to models, set Token quotas, revoke access, and track usage.
- 🤖 **AI agent access** — Use Codex and Claude Code on your devices from the browser, with resumable sessions, execution progress, and permission prompts.
- 💻 **Browser IDE** — Edit projects and use terminals and extensions through code-server.
- ✨ **AI in your workflow** — Inspect terminal output, draft commands, and query databases within user permissions, with approval where required.
- 💬 **Ask about your resources** — Find connectors, devices, and applications within your access scope.
- 🔌 **Outbound-only connectors** — Connect private devices without opening inbound ports on them.
- 🔐 **Application access** — Access TCP, HTTP, HTTPS, WebSocket, and SSH services with per-access controls.
- 🖥️ **Browser workspaces** — Work with terminals, remote desktops, databases, and caches in your browser.
- 📁 **Files and objects** — Manage files over SFTP and browse S3-compatible storage (read-only).
- 🔎 **Application discovery** — Detect existing services on connector devices and register them from the console.
- 👥 **Identity and access management** — Manage users and resources with Casbin-backed authorization.
- 🛡️ **Firewall policies** — Restrict TCP and HTTP access by source IP or CIDR.
- 📋 **Logs and audit** — Review management actions and supported application sessions.
- 📦 **Self-hosted deployment** — Run the complete control plane on your own Linux server.
## Install
Download the self-contained Docker bundle, extract it, and run the installer (Docker 20.10+ with Compose is required):
```bash
wget https://github.com/liaisonio/liaison/releases/download/v1.15.4/liaison-1.15.4-linux-amd64.tar.gz
tar -xzf liaison-1.15.4-linux-amd64.tar.gz
cd liaison-1.15.4-linux-amd64
./install.sh
```
Open `https://` after installation. The installer prints the initial sign-in credentials.
## Supported access protocols
Access your existing private services through Liaison.
SSH / SFTP
Desktop
SQL databases
Data & search
Cache
Storage
LLM upstream protocols
Web / TCP
LLM upstreams support **OpenAI-compatible**, **Anthropic Messages**, and **Ollama**. Clients use OpenAI-compatible endpoints; Anthropic upstreams also expose native Messages endpoints. Logos identify existing services you can access, not products bundled or deployed by Liaison. Database and desktop logos refer to browser workspaces, not native database/RDP/VNC server listeners.
## Agent model providers
Configure the model behind Liaison’s built-in Agent, independently of service access.
Models
Eight provider presets, plus custom OpenAI-compatible services.
## Product tour
### Local LLM access

### Web SSH
Work in an audited browser terminal with an Agent that can inspect session output and help draft commands.

### Private web applications
Access media servers and other internal web applications through Liaison.

### Private AI assistants
Keep internal AI tools reachable without exposing the private network.

### Web MySQL
Browse schemas, run SQL, and ask the session Agent to query and explain results, with approval where required.

### Web MongoDB
Explore collections and ask the session Agent to run approved queries and explain documents, without a local client.

### Web VNC
Open a private VNC desktop in a managed browser session.

### Web RDP
Connect to an RDP desktop from the same access workflow.

## Documentation
- [Docker deployment](deploy/docker/README.md)
- [API reference](docs/swagger/swagger.yaml)
- [Release notes](https://github.com/liaisonio/liaison/releases)
- [Issues](https://github.com/liaisonio/liaison/issues)
- [Discussions](https://github.com/liaisonio/liaison/discussions)
## Contributing
Liaison is actively evolving, and we welcome developers contributing to the self-hosted edition in this repository.
- AI agents: integrations, session management, and collaboration.
- Application access: SSH, files, databases, IDEs, remote desktops, and model APIs.
- Cross-platform support: installation and compatibility on Linux, macOS, and Windows.
- User experience: interface improvements, translations, and documentation.
For larger changes, open an issue first to agree on scope. Keep pull requests focused, describe how you verified the change, and never include credentials, private data, or environment-specific deployment details. You can participate entirely on GitHub; joining a chat group is optional.
Bug reports, feature proposals, documentation improvements, and pull requests are welcome. Start with [Issues](https://github.com/liaisonio/liaison/issues) or open a [Pull Request](https://github.com/liaisonio/liaison/pulls).
## License
Liaison is licensed under the [GNU Affero General Public License v3.0](LICENSE).