Remote Access
Access your agent from anywhere using Tailscale.
Remote Access
Jean2 binds to 0.0.0.0:8742 by default — it's already listening on all network interfaces. With Tailscale, any device on your tailnet can reach your server through a stable IP, no matter where you are.
There are two approaches. Pick whichever fits your setup.
Approach 1: Web client on the target machine
Run both the server and the web client on the machine you want to access remotely. Then open it from any browser on any device.
- Install Tailscale on the target machine and connect it to your tailnet
- Start the Jean2 server:
jean2 start
- Run the web client:
npx @jean2/client
- Open the URL printed by the client — replace
localhostwith the machine's Tailscale IP (100.x.x.x):
http://100.x.x.x:3774
That's it. Open that URL from any device on your tailnet — your laptop, your phone, a tablet, whatever. The web client talks to the server over WebSocket, so everything works the same as local.
Approach 2: Server only on the target machine
Run just the server on the remote machine. Connect to it from a desktop or web client running on your device.
- Install Tailscale on both machines
- On the target machine, start the server:
jean2 start
- On your device, point the client to the server's Tailscale IP:
Web client:
npx @jean2/client --server http://100.x.x.x:8742
Desktop app: Enter http://100.x.x.x:8742 as the server URL when connecting.
- Paste your API token when prompted.
Finding your Tailscale IP
On any machine with Tailscale installed:
tailscale ip
You can also find all devices on your tailnet in the Tailscale admin console.
Custom port
The default port is 8742. To change it, set in ~/.jean2/.env:
JEAN2_PORT=8080
Then connect to the custom port — e.g., http://100.x.x.x:8080.
Without Tailscale
Tailscale is the easiest option, but any network that lets two machines talk to each other works the same way:
- Same network — use the machine's local IP (
192.168.x.x) - VPN — use whatever IP your VPN assigns
- Public — set up a reverse proxy (nginx, Caddy) with TLS, or use a tunnel service.